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Abstract 

We study active integrity constraints and revision programming, two formalisms designed 
to describe integrity constraints on databases and to specify policies on preferred ways 
to enforce them. Unlike other more commonly accepted approaches, these two formalisms 
attempt to provide a declarative solution to the problem. However, the original seman- 
tics of founded repairs for active integrity constraints and justified revisions for revision 
programs differ. Our main goal is to establish a comprehensive framework of semantics 
for active integrity constraints, to find a parallel framework for revision programs, and 
to relate the two. By doing so, we demonstrate that the two formalisms proposed inde- 
pendently of each other and based on different intuitions when viewed within a broader 
semantic framework turn out to be notational variants of each other. That lends support 
to the adequacy of the semantics we develop for each of the formalisms as the foundation 
for a declarative approach to the problem of database update and repair. In the paper 
we also study computational properties of the semantics we consider and establish results 
concerned with the concept of the minimality of change and the invariance under the 
shifting transformation. 

To appear in Theory and Practice of Logic Programming (TPLP) 
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1 Introduction 

Integrity constraints are conditions on databases. If a database violates integrity 
constraints, it needs to be repaired — updated so that the integrity constraints hold 
again. Often there are several ways to enforce integrity constraints. The paper is 
concerned with the problem to specify policies for preferred ways to repair databases 
in a declarative way as part of the description of integrity constraints. 

A database can be viewed as a finite set of ground atoms in the language of 
first-order logic determined by the database schema and an infinite countable set of 
constants. An integrity constraint can be modeled by a formula in this language. A 



2 



L. Caroprese and M. Truszczynski 



database satisfies an integrity constraint if it is its Herbrand model. Since databases 
and sets of integrity constraints are finite, without loss of generality, we will limit 
our attention to the case when databases are subsets of some finite set At of propo- 
sitional atoms, and integrity constraints are clauses in the propositional language 
generated by At. The notions we propose and the results we obtain in that restricted 
setting lift to the first-order one (including aggregate operations and built-in predi- 
cates) via the standard concept of grounding. We do not discuss this matter here in 
more detail, as our main objective is to develop a semantic framework for declara- 
tive specifications of repair policies rather than to study practical issues of possible 
implementations . 

To illustrate the problem of database repair with respect to integrity constraints, 
let us consider the database I = {a, 6} and the integrity constraint ^aV^b. Clearly, 
X does not satisfy ~^a V ~^b and needs to be "repaired" — replaced by a database 
that satisfies the constraint. Assuming At = {a, 6, c, d}, the databases 0, {a}, {b}, 
{a, c} are examples of databases that could be considered as replacements for X. 
Since the class of replacements of I is quite large, the question arises whether there 
is a principled way to narrow it down. One of the most intuitive and commonly 
accepted postulates is that the change between the initial database X and the revised 
database 1Z, given by X ~ 71, be minim al (an example of an early work exploiting 
that idea is the paper by Winslett 1 1990 ; for a more detailed discussion of the role o f 
minimality in studies of database updates we refer to the paper by Chomicki l2007t ). 
In our case, the minimality of change narrows down the class of possible revisions 
to {a} and {&}. 

In some cases, the minimality of change is not specific enough and may leave 
too many candidate revisions. The problem can be addressed by formalisms that 
allow the database designer to formulate integrity constraints and, in addition, to 
state preferred ways for enforcing them. In this paper, which represents an extended 
version of two conference papers ( Caroprese and Truszczynski . 2008bl ia ) . we study 
two such formalisms: ac tive i ntegrity constraints introduced by Caroprese, Greco, 
Sirangelo and Zum pano 20061 and revision programming introduced by Marek and 
Truszczynski Il998 . 

Active integrity constraints and revision programs are languages for specifying 
integrity constraints. However, unlike in the standard case, when integrity con- 
straints are just first-order formulas that make no distinctions among its models, 
both sets of active integrity constraints and revision programs are meant to rep- 
resent policies for preferring some models over others. In other words, they give 
database system designers means to express policies for narrowing down the space 
of models that need to be considered when repairing inconsistencies or when query- 
ing an inconsistent database. In a sense, the two formalisms arise from the need 
to provide declarative counterparts to procedural attem pts to accomplish the same 
objective ( Widom and Ceri . 1996 : Jagadish et al. . 19991 ). An in-depth understand- 
ing of the semantics and, in general, properties of these two formalisms is then 
essential. Developing that understanding is the main goal of our paper. 

To recall, active integrity constraints explicitly encode both integrity constraints 
and preferred basic actions to repair them, in the case when the constraints are 



Active Integrity Constraints and Revision Programming 



3 



violated. To specify a precise meaning of sets of active integrity Caroprese et al. 12006 
proposed the semantics of founded repairs. Founded repairs are change- minimal and 
satisfy a certain groundedness condition. 

Revision programs consist of revision rules. Each revision rule represents an in- 
tegrity constraint, and implicitly encodes preferred ways to enforce it by means of 
a certain syntacti c conv ention. Following intuitions from logic programming, Marek 
and Truszczyhski Il998l proposed two semantics for revision programs: the seman- 
tics of justified revisions and the semantics of supported revisions. Each semantics 
reflects some form of preferences on ways to repair a database given a revision 
program. 

The original semantics of active integrity constraints and revision programming 
seemingly cannot be related in any direct way. They have different computational 
properties. For instance, the problem of the existence of a founded repair for a 
set of normal active integrity constraints is Ep-complete, while the same problem 
for justified revisions of normal revision programs is NP-complete. Furthermore, 
while the semantics for revision programming do not have the minimality of change 
property, founded repairs with respect to active integrity constraints do. 

In this paper, we demonstrate that despite the differences in the syntax, and the 
lack of a simple correspondence between justified revisions and founded repairs, 
the formalisms of revision programs and active integrity constraints are closely 
related. There are two keys to the relationship. First, we need a certain syntactic 
restriction on revision programs. Specifically, we introduce the class of proper 
revision programs and show that restricting to proper programs does not affect the 
expressive power. 

Second, we need to broaden the families of the semantics for each formalism so 
that the two sides could be aligned. To this end for active integrity constraints we 
introduce new semantics by dropping the minimality of change condition, which 
results in the semantics of weak repairs and founded weak repairs. We also adapt 
to the case of active integrity constraints the semantics of justified revisions (jus- 
tified weak revisions), which leads us to the semantics of justified weak repairs 
and justified repairs. For revision programs, we modify the semantics of revisions 
and justified revisions by imposing on them the minimality condition. Moreover we 
introduce the semantics of founded revisions (founded weak revisions) that corre- 
sponds to the semantics of founded repairs (founded weak repairs). We show that 
under a simple bijection between proper revision programs and active integrity 
constraints, founded (weak) revisions correspond to founded (weak) repairs and 
justified (weak) revisions correspond to justified (weak) repairs. This result demon- 
strates that both formalisms, even though rooted in different intuitions, can be 
"completed" so that to become notational variants of each other. 

Both in the case of active integrity constraints and revision programs, the con- 
cepts of "groundedness" we consider do not imply, in general, the property of the 
minimality of change. However, there are broad classes of sets of active integrity 
constraints, as well as classes of revision programs when it is so. In the paper, we 
present one class of sets of active integrity constraints, for which, independently 
of what database they are considered with, groundedness based on the notion of 
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being justified does imply minimality, that is, for which justified weak repairs are 
minimal and so, are justified repairs (cf. Theorem [4]). We also show that for ev- 
ery set of active integrity constraints there is a class of databases such that the 
minimality of justified weak repairs is guaranteed (cf. Theorem [3]). Because of the 
correspondence between active integrity constraints and revision programs, one can 
derive analogous results for revisions programs. 

A fundamental property of semantics describing database updates is the invari- 
ance under a certain transformation of repair instances that consists of (1) remov- 
ing some elements from a database and adding to it some other elements (thus, 
"shifting" the database into a different one), and then (2) rewriting active integrity 
constraints by replacing literals to reflect the changed status of some atoms in the 
database (cf. Section [13] for a detailed definition). Intuitively such a transformation, 
we call it shifting, when applied to a database and a set of integrity constraints 
should result in a new database repair instance, "isomporphic" to the original one 
under any reasonable database repair semantics. We show that it indeed is so for all 
the semantics we consider in the paper. Thanks to the correspondence between the 
setting of active integrity constraints and revision programs, the same holds true in 
that latter setting, too. Shifting is an important property. It allows us to reduce the 
general database repair (revision) problem, which is specified by two parameters, a 
database and a set of active integrity constraints (or a revision program), to a spe- 
cial case, when the database to be repaired is empty. The resulting setting is simpler 
as it involves one parameter only (a set of active integrity constraints or a revision 
program, respectively) . An important consequence of this is the existence of a direct 
way, in which database repair problem can be related t o standard logic program- 
ming with the seman tics of supported and stable models (IMarek and Truszczynski , 



1998t iPivkinal 120011 ). This paves the way to computational techniques for finding 



database repairs and revisions. 

The paper is organized as follows. In the following section, we situate our paper 
in the context of some related work. In Section [3l we give a formal introduction 
to the database update problem. In Section [4] we recall basic concepts related to 
active integrity c o nstra ints, including the semantics of repairs and founded repairs 
( Caroprese et al. . 20061) . Next, for a set of active integrity constraints we define 



weak repairs, founded weak repairs, justified weak repairs and justified repairs. 
We then discuss the normalization of active integrity constraints in Section [6l We 
prove that justified repairs of a database with respect to the "normalization" of a 
set of arbitrary active integrity constraints are justified repairs of this database with 
respect to the original ( "non- normalized" ) active integrity constraints (cf. Theorem 
[5]). This class of justified repairs is the most restrictive semantics for the database 
repair problem among those we consider. Thus, it offers repairs that can be regarded 
as most strongly grounded in a database repair instance (a database and a set of 
active integrity constraints). 

Section [7] contains complexity results concerning the existence of repairs of the 
types we consider in the paper, and Scction|8]gives a brief summary of our knowledge 
concerning the semantics of active integrity constraints. In particular, we discuss 
there the relationships among the semantics as well as how one could take advantage 
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of the multitude of the semantics considered to handle inconsistency (non-existence 
of repairs of the most restrictive types). 

Next, we recall basic concepts of revision programming. We then introduce some 
new semantics for revision programs. In Section[Tl]we establish a precise connection 
between active integrity constraints and revision programs. We also obtain some 
complexity results. 

Sectionll3lis conce rned with the shifting transformation (jMarek and Truszczvhski . 



1998c iPivkinaL 120011 ) . We show that all semantics discussed in the paper (for either 



formalism) are invariant under the shifting transformation (the proofs of those re- 
sults are quite technical and we provide them in the appendix). The last section 
of the paper offers additional discussion of the contributions of the paper and lists 
some open problems. 

We close the introduction by stressing that our goal is not to single out any of the 
semantics as the "right" one. For instance, while the semantics of justified repairs 
(revisions) seems to be best motivated by the principles of groundedness and mini- 
mality, the semantics given by the justified repairs (revisions) of the normalization 
of active integrity constraints (revision programs) , being even more restrictive, cer- 
tainly deserves attention. And, in those cases when justified semantics do not offer 
any repairs (revisions) relaxing the minimality requirement or the groundedness 
requirement offers justified weak repairs (revisions) or founded repairs (revisions) 
that one could use to enforce constraints. We discuss this matter, as well as com- 
putational trade-offs, in Section [5] and at the end of Section IT2"1 



2 Related Work 

Integrity constraints may render a database inconsistent. Addressing database in- 
consistency is a problem that has been studied extensively in the literature, and 
several approaches to database maintenance under integrity constraints have been 
proposed. 

Our work is cl osely related to studies of event-condition-event (ECA) rules in 
active databases ( Widom and Ceri . 19961) . The main difference is that while the 



formalisms of active integrity constraints and revision programs are declarative, 
ECA rules have only been given a procedural interpretation. 
To recall, an ECA rule consists of three parts: 

1. Event: It specifies situations that trigger the rule (e.g. the insertion, deletion 
or update of a tuple, the execution of a query, the login by a user) 

2. Condition: It usually models an integrity constraint. Being true in a triggered 
ECA rule means the constraint is violated and causes the execution of the 
action 

3. Action: Typically, it is a set of update actions (insert, delete, update). It is 
executed when the condition of a triggered rule is true. 

ECA rules without the event part are called condition-action (CA) rules. The 
structure of CA rules is similar to normal active integrity constraints, as we con- 
sider them here. In this sense, the formalisms of ECA rules and active integrity 
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constraints are similar. However, there are significant differences, too. Most im- 
portantly, the work on ECA rules focused so far only on procedural semantics and 
particular rule processing algorithms. These algorithms determine which ECA rules 
are invoked and in what order. They use different methods for conflict resolution 
(needed when several rules are triggered at the same time), and for ensuring termi- 
nation (executing an action of a rule may make another triggered rule applicable, 
whose action in turn may make the first rule applicable again). 

Another approach to specify the policy for s electin g a rule from among those that 
were activated was proposed by Jagadish et al. 19991 It is based on the specification 
of a set of meta-rules of four types: 

1. Positive requirement meta-rules: A meta-rule of this type specifies that if a 
rule A executes, than a rule B must execute as well. 

2. Disabling Rules: A meta-rule of this type specifies if a rule A is executed then 
a rule B will not be executed and vice versa. 

3. Preference meta-rules: A preference meta-rule specifies a preference between 
two rules. If A is preferable over B and both are fireable then A will be fired. 

4. Scheduling meta-rules: A meta-rule of this type specifies the order of execution 
of two fireable rules. 

Again, so far only procedural approaches to interpret meta-rules have been devel- 
oped and studied. 

In the two cases discussed, the lack of declarative semantics means there are no 
grounds for a principled evaluation of rule processing algorithms. In contrast, in 
our work we focus on declarative semantics for sets of active integrity constraints 
and revision programs. In particular, we propose several new semantics and study 
their properties. Our results apply to CA rules and, in fact, they are more general, 
as active integrity constraints allow several possible actions to choose from. On the 
other hand, at present our formalisms do not allow us to specify tri ggering events . 



Ou r work is also related to studies of consistent query answering ([Arenas et al 



That research established a logical characterization of the notion of 



a consistent answer in a relational database that may violate integrity constraints, 
developed properties of consistent answers, and methods to compute them. 

The notion of a consistent answer is based on the notion of repair. A repair of a 
database is a database that is consistent with respect to a given set of integrity con- 
straints and differs minimally from the original one. A consistent answer to a query 
Q over a (possibly inconsistent) database X with respect to a set of integrity con- 
straints is a tuple that belongs to the answers to the same quer y over all repairs of X . 



Com puting consistent answers exploits the notion of a residue (jChakravarthv et al 



19901 ) . Given a query and a set of integrity constraints over a database X, instead 
of computing all the repairs of X and querying them, the consistent answers are 
obtained by computing a new query and submitting it to X. The answers to the 
new query are exactly the consistent answers to the original one. The soundness, 
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completeness and termination of this technique is proved for several classes of con- 
straints and queries. However, the completeness is l ost in the case of disjunctive 
or existential queries. Arenas, Bertossi and Chomicki 120031 present a more general 
approach that allows us to compute consistent answers to any first-order que ry. It 
is based on the notion of a logic program with exceptions. Bravo and Bertossi 12006 
study the problem of consistent query answering for databases with null values. 
They propose a s eman tics for integrity constraint satisfaction for that setting. Mar- 
ileo and Bertossi 120071 developed a system for computing consistent query answers 
based on that semantics. 

In research on consistent query answering, the semantics of choice is that of 
minimal change — queries are answered with respect to all databases that differ 
minimally from the present one and that satisfy all integrity constraints. Thus, no 
distinction is made among different ways inconsistencies could be removed and no 
formalisms for specifying policies for removing inconsistencies are discussed. The 
objectives of the research on active integrity constraints and revision programs have 
been, in a sense, orthogonal. Up to now (including this paper), the main focus was 
on embedding within integrity constraints declarative policies for removing incon- 
sistencies, and on establishing possible semantics identifying candidate databases 
to consider as repairs. It has not yet addressed the problem of consistent query 
answering with respect to these semantics, an intriguing and important problem to 
address in the future. 

A closely related framework to ours was proposed and studied by Greco et al. 



20031 . It was designed for co mputi ng repairs and consistent answers over inconsis- 



tent databases. Greco et al. 120031 defined a repair as an inclusion-minimal set of 
update actions (insertions and deletions) that makes the database consistent with 
respect to a set of integrity constraints. The framework relies on repair constraints, 
rules that specify a set of insertions and deletions which are disallowed, and pri- 
oritized constraints, rules that define priorities among repairs. In that framework, 
to compute repairs or the consistent answers, one rewrites the constraints into a 
prioritized extended disjunctive logic programs with two different forms o f nega tion 
(negation as failure and classical negation). As shown by Caroprese et al. 20061 the 
framework can be cast as a special case of the formalism of active integrity con- 
straints. A different notion of minimality, based on the cardin ality of sets of insert 
and delete actions, is studied in ( Lopatenko and Bertossi . 20061) . This work presents 
a set of detailed complexity results of the problem of consistent query answering in 
the case only cardinality-b ased r epairs are considered. 

Katsuno and Mcndclzon Il99ll consider the problem of knowledge base updates. 
They analyze some knowledge base update operators and propose a set of postulates 
knowledge base update operators should satisfy, but do not advocate any particular 
update operator. For Katsuno and Mcndclzon a knowledge base is a propositional 
formula. Our setting is much more concrete as we consider databases, knowledge 
bases that are conjunctions of atoms and integrity constraints and, importantly, 
where updates are restricted to insertion or deletions of atoms. Moreover, our focus 
is not in update operators but on defining types of databases that can result from 
a given database when integrity constraints are enforced according to policies they 
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encode. However, the semantics we propose and study in the paper give rise to 
knowledge base operators that could be considered from the standpoint of Katsuno- 
Mendelzon postulates. We provide additional comments on that mater in the last 
section of the paper. 

3 Integrity Constraints and Database Repairs — Basic Concepts 

Databases and entailment. We consider a finite set At of propositional atoms. 
We represent databases as subsets of At. A database X entails a literal L = a 
(respectively, L = not a), denoted by I |= L, if a G I (respectively, a g" I). 
Moreover, X entails a set of literals S, denoted by I \= S, if it entails each literal in 
S. 

Update actions, consistency. Databases are updated by inserting and deleting 
atoms. An update action is an expression of the form +a or —a, where a G At. 
Update action +a states that a is to be inserted. Similarly, update action — a states 
that a is to be deleted. We say that a set U of update actions is consistent if it does 
not contain update actions +a and —a, for any a G At. 

Sets of update actions determine database updates. Let I be a database and U 
a consistent set of update actions. We define the result of updating I by means of 
U as the database 

IoM = (l U {a | + a G U}) \ {a | - a G U}- 

We have the following straightforward property of the operator o, which asserts 
that if a set of update actions is consistent, the order in which they are executed is 
immaterial. 

Proposition 1 

If U\ and U2 are sets of update actions such that U\ U U2 is consistent, then for 
every database l,lo (Ui UU2) = {I ° U\) o U2 

Integrity constraints, entailment (satisfaction). It is common to impose on 
databases conditions, called integrity constraints, that must always be satisfied. In 
the propositional setting, an integrity constraint is a formula 

r = Li, L m D _L, (1) 

where Li, 1 < i < m, arc literals and ',' stands for the conjunction. Any subset of 
At (and so, also any database) can be regarded as a propositional interpretation. 
We say that a database I satisfies an integrity constraint r, denoted by X (= r, if 
X satisfies the propositional formula represented by r. Moreover, I satisfies a set R 
of integrity constraints, denoted by X |= R, if I satisfies each integrity constraint 
in R. In this way, an integrity constraint encodes a condition on databases: the 
conjunction of its literals must not hold (or equivalently, the disjunction of the 
corresponding dual literals must hold). 

Any language of (propositional) logic could be used to describe integrity con- 
straints (in the introduction we used the language with the connectives V and -1). 
Our present choice is reminiscent of the syntax used in logic programming. It is 
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not coincidental. While for integrity constraints we adopt a classical meaning of 
the logical connectives, for active integrity constraints the meaning depends on and 
is given by the particular semantics considered. We discuss later several possible 
semantics for active integrity constraints and discuss their properties. In most of 
them, the way we interpret boolean connectives, in particular, the negation and 
the disjunction, has some similarities to the default negation operator in logic pro- 
gramming and so, as it is common in the logic programming literature, we denote 
them with not and | rather than -> and V. 

Given a set r\ of integrity constraints and a database X, the problem of database 
repair is to update X so that integrity constraints in r\ hold. 

Definition 1 (Weak Repairs and Repairs) 

Let I be a database and 77 a set of integrity constraints. A weak repair for (X, rj) is 
a consistent set U of update actions such that ({+a | a 6l}U{-a | a G At\I})C\ 
hi = (U consists of "essential" update actions only), and X o U |= 77 (constraint 
enforcement). 

A consistent set U of update actions is a repair for (I, 77) if it is a weak repair for 
(X, 77) and for every U' C U such that XoU' |= 77, U' — U (minimality of change). 
□ 

If an original database satisfies integrity constraints (formally, if X \= 77) , then 
no change is needed to enforce the constraints and so W = is the only repair 
for (1,77). However, there may be other weak repairs for (1,77). This points to the 
problem with weak repairs. They allow for the possibility of updating X by means 
of a weak repair U for (X, rj) even when X does not violate 77. Thus, the minimality 
of change is a natural and useful property and, for the most part, we are interested 
in properties of repairs and their refinements. However, considering weak repairs 
explicitly is useful as it offers a broader perspective. 

If a set 77 of integrity constraints is inconsistent, there is no database satisfying it 
(constraints cannot be enforced) . In such case, the database repair problem is trivial 
and not interesting. For that reason, it is common in the database research to re- 
strict investigations to the case when integrity constraints are consistent. However, 
assuming consistency of integrity constraints does not yield any significant simpli- 
fications in our setting. Moreover, as we point out in the next section, a different 
notion of inconsistency arises in formalisms we study here that is more relevant and 
interesting. Therefore, in this paper, we do not adopt the assumption that integrity 
constraints are consistent. 

Finally, we note that the problem of the existence of a weak repair is NP-complctc 
(it is just a simple reformulation of the SAT problem). Indeed, given a database X 
and a set of integrity constraints 77 = {Li.i 7 • ■ • , Lx,mi 3 _L, . . . , L n _i, . . . , £ n ,m„ 3 
_L}, a weak repair for (1,77) exists if and only if 77 is satisfiable (we point out 
that the class of prepositional integrity constraints is, modulo a standard syntactic 
transformation, the same as the class of all prepositional CNF theories). Since 
repairs exist if and only if weak repairs do, the problem of the existence of a repair 
is NP-complete, too. 
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4 Active Integrity Constraints - an Overview 

Given no other information but a set of integrity constraints, we have no reason 
to prefer one repair over another. If several repairs are possible, guidance on how 
to select a repair to execute coul d be useful. The formalism of active integrity- 
constraints ( Caroprese et al. . 20061 ) was designed to address this problem. We will 



now review it and offer a first extension by introducing the semantics of founded 
weak repairs. 

Dual literals, dual update actions, mappings ua(-) and lit(-). For a prepo- 
sitional literal L, we write L D for the dual literal to L. Further, if L = a, we define 
ua(L) = +a. If L = not a, we define ua(L) = — a. Conversely, for an update action 
a = +a, we set lit(a) = a and for a = — a, lit (a) = not a. We call +a and —a the 
duals of each other, and write oP to denote the update action dual to an update 
action a. Finally, we extend the notation introduced here to sets of literals and sets 
of update actions, as appropriate. 

Active integrity constraints, the body and head. An active integrity con- 
straint (aic, for short) is an expression of the form 

r = Li, . . . , L m D «i| . . . \otu (2) 

where Li are literals, ctj are update actions, and 

{lit{ ai ) D ,...,lit(a k ) D } C {L 1 ,...,L m }- (3) 

The set {Li, . . . , L m } is the body of r; we denote it by body(r). Similarly, the set 
{ai, . . . , at} is the head of r; we denote it by head(r). 

Active integrity constraints as integrity constraints; entailment (satisfac- 
tion). An active integrity constraint with the empty head can be regarded as an 
integrity constraint (and so, we write the empty head as _L, for consistency with the 
notation of integrity constraints). An active integrity constraint with a non-empty 
body can be viewed as an integrity constraint that explicitly provides support for 
some update actions to apply. Namely, the body of an active integrity constraint 
r of the form ([2|) represents a condition that must be faise and so, it represents 
the integrity constraint L\, . . . , L m D _L Thus, we say that a database T satisfies 
an active integrity constraint r if it satisfies the corresponding integrity constraint 
L±, . . . , L m D _L. We write X \= r to denote that. This concept extends to sets 
of active integrity constraints in the standard way. However, an active integrity 
constraint is more than just an integrity constraint. It also provides support for use 
of update actions that are listed in its head. 

Updatable and non-updatable literals. The role of the condition Q is to en- 
sure that an active integrity constraint supports only those update actions that 
can "fix" it (executing them ensures that the resulting database satisfies the con- 
straint). The condition can be stated concisely as follows: [lit(head(r))] D C body(r). 
We call literals in [lit(head(r))] D updatable by r. They are precisely those liter- 
als that can be affected by an update action in head(r). We call every literal in 
body(r)\[lit(head(r))] D non-updatable by r. We denote the set of literals updatable 
by r as up{r) and the set of literals non-updatable by r as nup(r). 
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With the notation we introduced, we can discuss the intended meaning of an 
active integrity constraint r of the form ([2]) in more detail. First, r functions as 
an integrity constraint L\, . . . , L m D _L. Second, it provides support for one of the 
update actions cti, assuming all non-updatable literals in r hold in the repaired 
database. In particular, the constraint a,b D —a\ — b, given X = {a, &}, provides 
the support for —a or —6, independently of the repaired database, as it has no 
non-updatable literal. In the same context of X = {a, b}, the constraint a,b D —a 
provides support for —a but only if b is present in the repaired database. 

It is now straightforward to adapt the concept of a (weak) repair to the case of 
active integrity constraints. Specifically, a set IA of update actions is a (weak) repair 
for a database X with respect to a set rj of active integrity constraints if it is a repair 
for X with respect to the set of integrity constraints represented by r\. 

Let us consider the active integrity constraint r = a, b D — b, and let X = {a, 6} 
be a database. Clearly, X violates r as the condition expressed in the body of r is 
true. There are two possible repairs of X with respect to r or, more precisely, with 
respect to the integrity constraint encoded by r: performing the update action — a 
(deleting a), and performing the update action —b (deleting b). Since r provides 
support for the update action — 6, we select the latter. 

Repairs do not need to obey preferences expressed by the heads of active in- 
tegrity constraints. To formalize the notion of "su pport" and translate it into a 



policy to select "preferred" repairs, Caroprcsc ct al. 120061 proposed the concept of 
a founded repair — a repair that is grounded (in some sense, implied) by a set of 
active integrity constraints. The following definition, in addition to founded repairs, 
introduces a new semantics of founded weak repairs. 

Definition 2 (FOUNDED (weak) REPAIRS) 

Let I be a database, rj a set of active integrity constraints, and IA a consistent set 
of update actions. 

1. An update action a is founded with respect to (X,rj) and U if there is r G rj 
such that a G head(r), X o IA \= nup(r), and XoU \= lit(/3) D , for every 
P G head(r) \ {a}. 

2. The set U is founded with respect to (X, rj) if every element of U is founded 
with respect to (I, rf) and U. 

3. U is a founded (weak) repair for {X,r/) if IA is a (weak) repair for (X, rf) and 
IA is founded with respect to (X, rf) . □ 

The notion of foundedness of update actions is not restricted to update actions 
in IA. In other words, any update action whether in IA or not may be founded 
with respect to (X, rf) and IA. However, if an update action, say a, is founded with 
respect to {X, rf) and IA, and IA enforces constraints, that is, XolA (= 77, then IA must 
contain a. Indeed, let us assume that a is founded with respect to (X, 77} and IA 
by means of an active integrity constraint r G rj. Let us also assume that X y= r. 
that is, X \= body(r). By the foundedness, all literals in body(r), except possibly for 
lit(a) D , are satisfied in XolA. Thus, since IA enforces r, it must contain a. In other 
words, foundedness of a "grounds" a in (X, 77} and IA 
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In the same time, it is important to note that just foundedness of a set U of 
update actions does not imply the constraint enforcement nor the minimality of 
change. We show that in the example below. Therefore, in the definition of founded 
(weak) repairs, the property of being a (weak) repair must be imposed explicitly. 

Example 1 

Let 1 = and n consist of the following active integrity constraints: 
n = not a D +a 
r2 = not b, c D +b 
r$ = 6, not c D +c- 

The unique founded repair for (X, rj) is {+a}. The set {+a, +b,+c} is founded, 
guarantees constraint enforcement (and so, it is a founded weak repair), but it is 
not change-minimal. The set {+&, +c} is founded but docs not guarantee constraint 
enforcement. We also note that foundedness properly narrows down the class of 
repairs. If 77 = {a, b D —b}, and X = {a, 6} (an example we considered earlier), 
U = { — a} is a repair for (X, 77} but not a founded repair. □ 

We emphasize that founded repairs are not minimal founded weak repairs but 
founded weak repairs that happen to be repairs (are minimal among all repairs). 
In particular, it is possible that founded weak repairs exist but founded repairs do 
not. 

Example 2 

Let 1 = and n consist of the following active integrity constraints: 

nota,b,c D +a notb,a,c D +6 

notc,a,b D +c not a D _L 

We recall that the integrity constraint not a D _L is a special active integrity con- 
straint (with an empty head). One can check that the only founded sets of update 
actions are U\ = (0 is always vacuously founded) and U2 = {+«, +b, +c}. More- 
over, U3 = {+a} is a repair and U2 is a weak repair. Thus, IA2 is a founded weak 
repair but, as it is not minimal, not a founded repair. In fact, there are no founded 
repairs in this example. □ 

This example demonstrates that when we encode into integrity constraints a 
policy for selecting preferred repairs, that policy may be "non-executable" for some 
databases under the semantics of founded repairs, as founded repairs may simply 
not exist. Moreover, it may be so even if the set of integrity constraints underlying 
the active integrity constraints involved is consistent, that is, if weak repairs exist 
(or, equivalcntly, if repairs exist, as repairs exist if and only if weak repairs do). 
The same is possible under the semantics of founded weak repairs and under all 
other semantics we consider later in the paper. In other words, the assumption of 
consistency of integrity constraints does not buy us much and so, we decided not 
to adopt it. 

Finally, we discuss the key issue arising in the context of founded repairs that 
points out to the need of considering other semantics for active integrity constraints. 
In some cases, founded repairs, despite combining foundedness with change- minimality, 
are still not grounded strongly enough. The problem is the circularity of support. 
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Example 3 

Let X = {a, b} and let 771 consist of the following aic's: 

ri = a, b D — a 

r2 = a, not b D —a 

73 = not a,b D —b- 
One can check that U = { — a, — b} is a repair for (1,771). Moreover, it is a founded 

repair: —a is founded with respect to {1, 771 ) and IA, with r<± providing the support 

necessary for foundedness of —a (i.e. Item 1 of Definition [2] is satisfied by — a, 771, 

X, IA and 72), while — b is founded with respect to (1, 7/1) and £Y because of 73 (i.e. 

Item 1 of Definition [2] is satisfied by —b, rji, I, U and 73). 

The problem is that, arguably, IA = { — a,— b} supports itself through circular 

dependencies. The constraint r*i is the only one violated by X and is the one forcing 

the need for a repair. However, r\ does not support foundedness of —a with respect 

to (1,771) and IA, aslot/ does not satisfy the literal b € nup{r{) (required by Item 

1 of Definition [2]) . Similarly, r\ does not support foundedness of —b with respect 

to (1,771) and IA (in fact, — b is not even mentioned in the head of r\). Thus, the 

support for the foundedness of — a and — b vo.ll must come from ri and 73 only. In 

fact, 7" 2 provides the support needed for —a to be founded with respect to (1, 771) 

and IA. However, that requires that b be absent from X olA and so, IA must contain 

the update action —b. Similarly, the support for foundedness of — b is given by 

73, which requires that a be absent from X o IA, that is, that —a be in IA. Thus, 

in order for — b to be founded, IA must contain — a, and for —a to be founded, IA 

must contain —b. In other words, the foundedness of { — a, — b} is "circular": —a is 

founded (and so included in IA) due to the fact that —6 has been included in IA, and 

— b is founded (and so included in IA) due to the fact that —a has been included 

in IA, and there is no independent justification for having any of these two actions 

included — as we noted, r± does not "found" any of —a nor —b. □ 

The problem of circular justifications cannot be discarded by simply hoping they 
will not occur in practice. If there are several independent sources of integrity 
constraints, such circular dependencies may arise, if only inadvertently. 

To summarize this section, the semantics of repairs for active integrity con- 
straints enforces constraints and satisfies the minimality of change property It 
has no groundedness properties beyond what is implied by the two requirements. 
The semantics of founded repairs gives preference to some ways of repairing con- 
straints over others. It only considers repairs whose all elements are founded. How- 
ever, foundedness may be circular and some founded (weak) repairs may be "self- 
grounded" as in the example above. In the next section, we address the issue of 
sclf-groundcdness of founded (weak) repairs. 

On the computational side, the complexity of the semantics of repairs is lower 
than that of founded repairs. From the result stated in the previous section, it 
follows that the problem of the existence of a repair is NP-complete, while th e 
problem of the existence of a founded repair is Ep-complete ( Caroprese et al. . 20061 ). 



As we observed earlier, founded repairs are not minimal founded weak repairs and, 
in general, the existence of founded weak repairs is not equivalent to the existence 
of founded repairs. Thus, the complexity of the problem to decide whether founded 
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weak repairs exist need not be the same as that of deciding the existence of founded 
repairs. Indeed, the complexities of the two problems are different (assuming no 
collapse of the polynomial hierarchy). Namely, the problem of the existence of 
founded weak repairs is "only" NP-complete (the proof is simple and we omit it). 

5 Justified repairs 

In this section, we will introduce another semantics for active integrity constraints 
that captures a stronger concept of groundcdness than the one behind founded 
repairs. The goal is to disallow circular dependencies like the one we discussed in 
Example [3l 

We start by defining when a set of update actions is closed under active integrity 
constraints. Let rj be a set of active integrity constraints and let U be a set of update 
actions. If r G ?y, and for every non-updatablc literal L G body(r) there is an update 
action a G IA such that lit(a) = L then, after applying U or any of its consistent 
supersets to the initial database, the result of the update, say TZ, satisfies all non- 
updatablc literals in body(r). To guarantee that TZ satisfies r, TZ must falsify at 
least one literal in body(r). To this end U must contain at least one update action 
from head(r). 

Closed sets of update actions. A set U of update actions is closed under an aic 
r if nup(r) G lit{JJ) implies head(r) n U ^ 0. A set U of update actions is closed 
under a set rj of active integrity constraints if it is closed under every r G n. 

If a set of update actions is not closed under a set rj of active integrity constraints, 
executing its elements does not guarantee to enforce constraints represented by rj. 
Therefore closed sets of update actions are important. We regard closed sets of 
update actions that are also minimal as "forced" by rj, as all elements in a minimal 
set of update actions closed under r\ are necessary (no nonempty subset can be 
dropped). 

Example 4 

Let us consider the database and active integrity constraints from Example [3J The 
set U = { — a, —6} is closed under -qi. We observe that the empty set is also closed 
under 771. Therefore U is not minimal. □ 

No-effect actions. Another key notion in our considerations is that of no-effect 
actions. Let I be a database and TZ a result of updating I. An update action 
+ a (respectively, —a) is a no-effect action with respect to (I, TZ) if a G X n 1Z 
(respectively, a ^XUTZ). Informally, a no-effect action does not change the status 
of its underlying atom. We denote by ne(I, TZ) the set of all no-effect actions with 
respect to (I, TZ) . We note the following two simple properties reflecting the nature 
of no-effect actions — their redundancy. 

Proposition 2 

Let I be a database. Then 



1. For every databases TZ, TZ' } if ne(l, TZ) C ne(I, TZ 1 ), then TZ' o ne(X, TZ) = TZ' 
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2. For every set £ of update actions such that £ U ne(X, X o £) is consistent, if 
£' C 5, then lo £' = J o (£' U ne(l,l o £)). 

Proof: 

1. Since ne(X,ft) = {+a \a elnR}U {-a | a £ X U ft} and ne(X,W) = 
{+a \a e I n ft'} U {-a | a ^ X U ft'}, we have X n ft C I n ft' and 
XUft' C ZUft. It follows that Znft C ft' and ft' C luft. Thus, ft'one(Z, ft) = 

(ft' u (in ft)) n (z u ft) = ft'. 

2. As £' C £, then ne(X,Io£) C ne(X,Xo£'). Since £Une(I,Xo£) is consistent, 
Propositions[T]and[2jl) imply that Xo(£'Une(X,Xo£)) = (Xo£')one(X,Xo£) = 
Xo£'. □ 

Our semantics of justified repair s is based on the knowledge- representation prin- 
ciple, a form of the frame axiom ( McCarthy and Haves , 19691) . that remaining in 



the previous state requires no reason (persistence by inertia). Thus, when justify- 
ing update actions necessary to transform X into ft based on r\ we assume the set 
ne(I, ft) as given. This brings us to the notion of a justified weak repair. 

Definition 3 (JUSTIFIED WEAK repairs) 

Let X be a database and rj a set of active integrity constraints. A consistent set U 
of update actions is a justified action set for (I, 77) if U is a minimal set of update 
actions containing ne(X, XoU) and closed under r\. 

liU is a justified action set for (X,n). then £ = U\ne(I,XoU) is a justified weak 
repair for (X, rj) . □ 

Intuitively, a set U of update actions is a justified action set, if it is precisely 
the set of update actions forced or justified by rj and the no-effect actions with 
respect to X and XoU. This "fixpoint" aspect of the definition is reminiscent of 
the definitions of semantics of several non-monotonic logics, including (disjunctive) 
logic programming with the answer set semantics. The connection can be made 
more formal and we take advantage of it in the section on the complexity and 
computation. 

Before we proceed, we will illustrate the notion of justified weak repairs. 
Example 5 

Let us consider again Example [3] The set U = { — a, —6} is not a justified weak 
repair for (X,r}i). One can check that U U ne(X,X o U) (= { — a, —6}) contains 
ne(I,2oM) (= 0), and is closed under 771. But, as we observed in Example[4j it is 
not a minimal set of update actions containing ne(X, XoU) and closed under 771. 
Indeed, has these two properties, too. In fact, one can check that (X, 771) has no 
justified weak repairs. 

Next, let us consider a new set, 772, of aic's, where r\ is replaced with r[ = a, b D 
— a\ — b. The constraint r[ provides support for —a or —b independently of the 
repaired database (as there are no non-updatable literals in r{). If —a is selected 
(with support from r[), 73 supports —b. If —6 is selected (with support from r[), 
7-2 supports — a, Thus the cyclic support given by r 2 and r 3 in the presence of r\ is 
broken. Indeed, one can check that { — a, — b} is a justified weak repair, in fact, the 
only one. □ 
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We note that the set 7ie(X, XolA) can be quite large. In particular, the cardinality 
of the set of update actions — a, where a ^ XUlZ, cannot be bounded by the size of 
the database repair problem, which is given by the size of X and 77. However, only 
those update actions — a of that type are important from the perspective of justified 
weak revisions, whose literals not (a) occur in the bodies of active integrity con- 
straints in 77 (as no other update action of that type can play a role in determining 
minimal sets of update actions closed under integrity constraints). 

We will now study justified action sets and justified weak repairs. We start with 
an alternative characterization of justified weak repairs. 

Theorem 1 

Let I be a database, 77 a set of active integrity constraints and £ a consistent 
set of update actions. Then £ is a justified weak repair for (X, rj) if and only if 
£ l~l ne(X, X o £) = and £ U ne(X, 2 o £) is a justified action set for (X, rj) . 

Proof: (=>) Since £ is a justified weak repair for (X, n), £ = lA\ne(X,XolA) for some 
consistent set IA of update actions such that IA is minimal containing ne(I, Told) 
and closed under 77. By Proposition [5^2), XolA =Io£. Thus, £ H ne(X,X o £) = 0. 
Moreover, since ne(X,X olA) C IA, IA = £ U ne(X,I o £). Hence, £Une(I,Io£) is a 
justified action set for (X, 77). 

(<=) Let U = £Une(X,Xo£). We will show that ne(X,XoU) = ne(X,Xo£). To this 
end, let +a £ ne(I,IoU). Then, a £ I and —a^U (the latter property follows by 
the consistency of IX). It follows that —a ^ £ and, consequently, +a £ ne(I,X o £). 
Similarly, we show that if —a £ ne(I,IoM), then —a £ ne(X,Xo£). Thus, we 
obtain that ne(X, X oM) C 7ie(X, X o £). 

Conversely, let +a £ ne(X, Xo£). Then a £ X and +a £ IA. Since U is consistent 
(it is a justified action set for (X, 77)), X o U is well defined and +a £ ne(X,X o hi). 
The case —a £ ne(X,X o £) is similar. Thus, ne(X,X o £) C ne(X,X o U) and the 
claim follows. 

Since £ D ne(X,X o £) =0, we obtain that £ = U \ ne(X,X o U). Since W is a 
justified action set for (1, 77), £ is a justified weak repair for (X, 77). □ 

Justified weak repairs have two key properties for the problem of database update: 
constraint enforcement (hence the term "weak repair") and foundedncss. 

Theorem 2 

Let X be a database, 77 a set of active integrity constraints, and £ a justified weak 
repair for (X, 77) . Then 

1. For every atom a, exactly one of +a and — a is in £ U ne(X, X o £ ) 

2. Xo£\=n 

3. £ is founded for (X, 77). 

Proof: Throughout the proof, use the notation U — £ U ne(X, X o £). 

1. Since IA is consistent (cf. Theorem [lj, for every atom a, at most one of +0, 
— a is in IA. If +a £ ne(X,X o £) or —a S ne(X,X o £) then the claim follows. 
Otherwise, the status of a changes as we move from X to Io£. That is, cither 
+ a or —a belongs to £ and, consequently, to IA, as well. 
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2. Let us consider r € 77. Since U is closed under 77 (cf. Theorem [T]) , we have 
nup(r) % lit(£ U ne(2,2 o £)) or head(r) n (£ U ne(X,X o £)) ^ 0. Let us 
assume the first possibility, and let I be a literal such that L € nup(r) and 
ua(L) £ U. By (1), ua(L D ) G W. Consequently, I o W ^ i. By Proposition 
Et2), I of ^ £. Since I G &ody(r), Xo£ \= r. 

Thus, let us assume that head(r) HW ^ and let a G head(r) n U. Then 
a G head(r) and so, lit{a) D G body(r). Furthermore, a EU and so, I o W |= 
lit(a). By Proposition [2^2), Xo£ |= lit(a). Thus, Io£ |= r in this case, too. 

3. Let a G £ . By Theorem [Q a g ne(X,Xo£). Thus, ne(X,X of) C W\ {a}. 
Since W is a minimal set closed under 77 and containing ne(X, X o £) y U \ {a} 
is not closed under n. That is, there is r G 77 such that nup(r) C \ {a}) 
and head(r) D (W \ {a}) = 0. Wc have 



By Proposition [2] (and the fact that ne(I,7t) = ne(1Z,X), for every databases 
X and 72.) , 



From nup(r) C \ {a}), it follows that X o (U \ {a}) \= nup(r). By 

(|4j), 1 o (£ \ {a}) \= nup(r). Since a G head(r), lit(a D ) £ nup(r). Thus, 
/ o £ \= nup(r). 

The inclusion nup(r) C lit(U \ {a}) also implies nup(r) C Ut(lA). Since W is 
closed under 77, head(r) C\U ^ and so, head(r) CiU = {a}. 
Let us consider /? G head(r) such that /3 ^ a. It follows that /3 ^ By (1), 
(3 d and, consequently, / oW |= Since X oU = X o £ (Proposition [2]) , 
it follows that a is founded with respect to (X, 77) and £ . □ 

Theorem [2] directly implies that justified weak repairs are founded weak repairs. 

Corollary 1 

Let X be a database, 77 a set of active integrity constraints, and £ a justified weak 
repair for (X, 77) . Then, £ is a founded weak repair for (X, 77) . 

Examples [3] and [5] show that the converse to Corollary Q] does not hold. That is, 
there are founded weak repairs that are not justified weak repairs. 

While a stronger property than foundedness, being a justified weak repair still 
does not guarantee change-minimality (and so, the term weak cannot be dropped). 

Example 6 

Let X' = 0, and 773 be a set of aic's consisting of 
n = not a, b D +a| — b 
?2 = a,notb D — a\ + b- 

Clearly, X' is consistent with respect to 773. Let us consider the set of update actions 
£ = {+a.,+b}. It is easy to verify that £ is a justified weak repair for (X',773). 
Therefore, it ensures constraint enforcement and it is founded. However, £ is not 
minimal and the empty set of update actions is its only repair. □ 



Xo(U\{a}) 



Xo(ne(X,Xo£)U(£\{a})) 
(Xone(X,Xo£)) o (£ \ {«})• 



Io(W\{a})=Io(f\{a}). 



(4) 



18 



L. Caroprese and M. Truszczynski 



Thus, to have change-minimality, it needs to be enforced directly as in the case 
of founded repairs. By doing so, we obtain the notion of justified repairs. 

Definition 4 (JUSTIFIED REPAIR) 

Let X be a database and n a set of active integrity constraints. A set £ of update 
actions is a justified repair for (I,rj) if £ is a justified weak repair for (1, 77), and 
for every £' C £ such that X o £' |= 77, £' = £ . □ 

Theorem [2] has yet another corollary, this time concerning justified and founded 
repairs. 

Corollary 2 

Let I be a database, rj a set of active integrity constraints, and £ a justified repair 
for (X, 77). Then, £ is a founded repair for (1, 7/). 

Proof: Let £ be a justified repair for (1,r]). It follows by Theorem [2] that Xo£ |= 77. 
Moreover, by the definition of justified repairs, £ is change minimal. Thus, £ is a 
repair. Again by Theorem [21 £ is founded. Thus, £ is a founded repair for (1, 77). □ 
Examples [3] and [5] show that the inclusion asserted by Corollary [2] is proper. In- 
deed, we argued in Example [3] that { — a, — b} is a founded repair. Then, in Example 
[5]we showed that it is not a justified weak repair. Thus, { — a, —6} is not a justified 
repair, either. 

As illustrated by Example El in general, justified repairs form a proper subclass 
of justified weak repairs. However, in some cases the two concepts coincide — the 
minimality is a consequence of the groundedness underlying the notion of a justified 
weak repair. One such case is identified in the next theorem. The other important 
case is discussed in the next section. 

Theorem 3 

Let X be a database and rj a set of active integrity constraints such that for each 
update action a £ {J reri head(r), X \= lit(a D ). If £ is a justified weak repair for 
(1,77), then £ is a justified repair for (X, 77). 

Proof: Let £ be a justified weak repair for (I, rj) and let £' C £ be such that 

We define U = £ U ne(X,X o £). By Theorem Q] and Proposition [2^2) , U is a 
minimal set of update actions containing ne(X,X o £) and closed under 77. Let 
W = £' Une(I,Io£) and let r e 77 be such that ua(nup(r)) C U 1 . Since Io£' \= 77, 
X o £' body(r). Thus, it follows that there is L £ up(r) such that X o £' y= L. 
Since L £ up(r), there is a £ head(r) such that L = lit(a D ). By the assumption, 
J |= L, that is, X (= lit(a D ). Since I o £' ^ L, X o £' \= lit(a). Thus, a £ £' 
and, consequently, a £ U' . It follows that W is closed under r and, since r was 
an arbitrary element of 77, under 77. too. Thus, U' = U, that is, £' U ne(X,X o £ ) = 
£ U ne(X,Xo £). Since C £ and £ n ne(X,Xo £) = 0, £' = £. It follows that £ is 
a minimal set of update actions such that I o £ |= 77. □ 

The theorem above states that whenever each update action occurring in 77 is 
essential with respect to X (it is able to perform a real change over X) , the minimality 
of each justified weak repair is guaranteed (that is, it is a justified repair). 
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6 Normal active integrity constraints and normalization 

An active integrity constraint r is normal if \head(r)\ < 1. We will now study 
properties of normal active integrity constraints. First, we will show that for that 
class of constraints, updating by justified weak repairs guarantees the minimality 
of change property and so, the explicit reference to the latter can be omitted from 
the definition of justified repairs. 

Theorem 4 

Let I be a database and 77 a set of normal active integrity constraints. If £ is a 
justified weak repair for (I, n) then £ is a justified repair for (X, 77). 

Proof: Let £ be a justified weak repair for (X,rf). We have to prove that £ is 
minimal with respect to constraint enforcement. To this end, let us consider £' C £ 
such that I o £' (= r\. 

We define U = £ U ne(2, Xo£) and W = £ ' U ne(I, lo£). We will show that W 
is closed under r\. Let r £ 77 be such that ua(nup(r)) C 

Since Io£'|=r, Io£'^ body(r). By our assumption, ua(nup(r)) C W'. Thus, 
loU' \= nup(r). Since W' is consistent, Proposition[2][2) implies that Zo£' = loU' . 
Thus, I o £' f= mtjj(r). If head(r) = %, X o £' [= body(r) and so, I o £' ^ r, 
a contradiction. Thus, head(r) = {a}, for some update action a. Moreover, as 
Xo£' \=r,lo£' Ut(a D ). Consequently, X o £' \= lit(a). 

Since U' C U, ua(nup(r)) C U. By Theorem[l] U is closed under 77. Thus, a € U. 
Since 1 o U = 1 o £ (Proposition [2^2)), To £ \= lit(a). 

If I |= lit(a) then, aslof |= lit(a), we have a £ ne(I, lo £) CW. If I ^= lit(a) 
then, as I o £' |= lit(a), we have that a £ £' C U' . Thus, W is closed under r and 
so, also under 77. Consequently, £/' = U. Since £ n ne(X,X o £ ) = 0, it follows that 
£' = £. Thus, £ is a minimal set of update actions such that X o £ \= 77. □ 
Normalization. Next, we introduce the operation of normalization of active in- 
tegrity constraints, which consists of eliminating disjunctions from the heads of 
rules. For an active integrity constraint r = (f> D ai \ .. . \a n , by r™ we denote the 
set of normal active integrity constraints {cf> D cti, ...,<f> D a„}. For a set 77 of 
activ e integrity constraints, we set i] n = [J retl r n . It is shown by Caroprese et al. 



20061 that £ is founded for (X, rf) if and only if £ is a founded for {X, r\ n }. Thus, £ 
is a founded (weak) repair for (X, rj) if and only if £ is a founded (weak) repair for 
(X, rj n ). For justified repairs, we have a weaker result. Normalization may eliminate 
some justified repairs. That leads to an even more narrow class of repairs than 
justified ones, an issue we discuss later in Section [51 

Theorem 5 

Let X he a database and 77 a set of active integrity constraints. 

1. If a set £ of update actions is a justified repair for (1, 77™), then £ is a justified 
repair for (X, 77) 

2. If a set £ of update action is a justified weak repair for (1,77™), then £ is a 
justified weak repair for (X, rj). 
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Proof: Let £ be a justified repair for (I, r) n ). We define U = £ U ne(I,I o £). By 
Corollary [2j £ is a founded repair for {I, rf 1 ). By a result obtained by Caroprese et 
al. l2006l £ is a founded repair for (I, rf) and, consequently, a repair for (X, 77) . 



Since £ is, in particular, a justified weak repair for (I, 77™), W is a justified action 
set for (X, 77™) (Theorem [T]) . Thus, U is a minimal set of update actions containing 
ne(I,I o £) and closed under 77™. To prove that £ is a justified repair for (I, 77}, it 
suffices to show that U is a minimal set of update actions containing ne(I,I o £) 
and closed under 77. 

Let us consider an active integrity constraint 

r = lit(a®), . . . , lit(a^), <j> D «i| . . . \a n 

in 77 such that ua(nup(r)) C (we note that nup(r) consists precisely of the literals 
that appear in </>). It follows that IoU \= nup(r). Since £ is a repair, Io£ body(r). 
By Proposition [2J2), lof — loll. Thus, I oU \^ body(r). It follows that there is 
i,l<i<n, such that IoU ^ Kt(af ). Thus, af £ W. By Theorem [5(1), on G W. 
Thus, W is closed under r and, consequently, under 77, as well. 

We will now show that U is minimal in the class of sets of update actions con- 
taining ne(I,Io £) and closed under 77. Let W be a set of update actions such that 
ne(I,I o £) C U' C U and U' is closed under 77. Let us consider an active integrity 
constraint in s G 77" such that ua(nup(s)) C 

By the definition of 77™, there is an active integrity constraint r G 77 such that 

r = lit(cti), . . . , lit(a 1 j } ), . . . , lit(a®), (f> D ai\ . . . \aa\ . . . \a n 

and 

s = lit(a?),...,lit(a?),...,lit(a%),<f)D a v 

Since ua (71 up(s) C W , ua(nup{r) CW'.AsW' is closed under 77, there is j, 1 < j < n, 
such that ctj G W. For every k such that 1 < k < n and k ^ i, a® G W . By 
the consistency of U', we conclude that on € U'. Thus, U' is closed under s and, 
consequently, under 77™. Since U' CU and U is minimal containing ne(I, Io£) and 
closed under 77™ it follows that W = U. Thus, U is minimal containing ne(I, I o £) 
and closed under 77. Consequently, £ is a justified repair for (1, 77}. 
(2) If £ is a justified weak repair for (I,r) n ) then, by Theorem 21 £ is a justified 
repair for (I,r) n ). By (1), £ is a justified repair for (1,77) and so, a justified weak 
repair for (1, 77} . □ 
The following example shows that the inclusions in the previous theorem are, in 
general, proper. 

Example 7 

Let us consider an empty database I' = 0, the set 774 of aic's 
n = not a, not b D +a| + 6 

72 = a, not b D +b 

73 = not a, b D +a, 

its normalized version 77J 

7"i.i = not a, not b D +a 7^,1 = a,notb D +& 

ri 2 = not a, not b D +b 7^3 1 = not a^b D +a. 
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and the set of update actions E = {+a, +b}. It is easy to verify that £ is a justified 
repair for (X', 774). However, £ is not a justified weak repair for {!', 774 ) (and so, not a 
justified repair for (I', 774 )). Indeed, it is not a minimal set containing ne{X' ,1' o£) = 
and closed under 77™ , as is also closed under 774 . □ 



7 Complexity and Computation 

We noted earlier that the problem of the existence of a (weak) repair is NP-complete, 
and the same is true for the problem of the existence of founded weak repairs. On 
the other hand, the pr oblem of the existence of a founded repair is Sp-complete 
( Caroprese et all 20061 ). In this section, we study the problem of the existence of 



justified (weak) repairs. 

For our hardness results, we will use problems in logic programming. We will con- 
sider disjunctive and normal logic programs that satisfy some additional syntactic 
constraints. Namely, we will consider only programs without rules which contain 
multiple occurrences of the same atom (that is, in the head and in the body, negated 
or not; or in the body — both positively and negatively). We call such programs 
simple. It is well known that the prob lem of the existence of a stable model of a 



normal logic program is NP-complete (IMarek and Truszczvriski, Il 99lh . and of the 
disjunctive logic program — -co mplete ( Eiter and GottlobT 19951). The proofs 



provided by Marek and Truszczyhski 119911 and Eiter and Gottlob 1 19951 imply that 
the results hold also under the restriction to simple normal and simple disjunctive 
programs, respectively (in the case of disjunctive logic programs, a minor modifi- 
cation of the construction is required). 
Let p be a logic programming rule, say 

p = ai I . . . I afe <- /?• 

We define 

aic(p) = not 01, . . . , not a*,, /3 D +ai | . . . | + a*,- 

We extend the operator aic(-) to logic programs in a standard way. We note that 
if a rule p is simple, then body(aic(p)) is consistent and nup(aic(p)) = body(p). 

We recall that a set M of atoms is an answer set of a disjunctive logic program 
P if M is a minimal set closed under the reduct P M , where P M consists of the 
rules obtained by dropping all negative literals from those rules in P that do not 
contain a lite ral no t a in the body, for any a £ M (we refer to the paper by Gclfond 



and Lifschitz Il99ll for details) . Our first two lemmas establish a result needed for 



hardness arguments. 
Lemma 1 

Let P be a simple disjunctive logic program and M', M sets of atoms such that 
M' C M. Then M' is a model of P M if and only if {+a \ a E M'} U {-a \ a <£ M} 
is closed under aic(P). 

Proof: Let us define U = {+a \ a E M'} U {-a | a <£ M}. We note that U is 
consistent. 
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(=>) Let r G aic(P), p G P be a rule such that r = aic(p), and p' be the rule 
obtained by eliminating from p all negative literals. 

Since P is simple, nup(r) = body(p). Let us assume that nup(r) C It follows 
that p' E P M and that Af \= body{p'). Thus, head(p') Since head(p) = 

head(p') and head(r) = head{aic{p)) = ua(head(p)), head(r) nU ^ 0. That is, £Y 
is closed under r and, since r was chosen arbitrarily, under aic(P), too. 

Let us consider p' £ P M . There is p G P such that for every negative literal 
not a G body(p), a ^ Af , and dropping all negative literals from p results in p' . 
If body(p') C M', then 6ocfy(p) C lit{U). Thus, nup{aic(p)) C Z^. It follows that 
head(aic(p)) C\U Thus, head(p) n lit(U) ^ 0. Since head(p) consists of atoms 
and head(p') = head(p), head(p') n Af' ^ 0. That is, M' |= p' and, consequently, 
M'HP M □ 

Theorem 6 

Let P be a simple disjunctive logic program. A set Af of atoms is an answer set of 
P if and only if ua(M) is a justified weak repair for (0, aic(P)). 

Proof: (=>) Let M be an answer set of P. That is, M is a minimal set closed 
under the rules in the rcduct P M . By Lemma[lJ {+a | a G M} U { — a | a ^ M} is 
closed under aic(P). Let U' be a set of update actions such that { — a | a M} C 
W C {+a | a G M } U {-a | a ^ M}. We define W = {a \ + a G W'}. Then 
M' C M. By LcmmalU Af' |= P M . Since M is an answer set of P. M' = M and 
U' = U. It follows that {+a \ a G M} U { — a | a ^ M} is a minimal set closed 
under aic(P) and containing { — a | a ^ Af}. Since ua(M) = {+a \ a G Af} and 
ne(0, o ua(Af)) = { — a \ a ^ Af }, Theorem [1] implies that ua(Af) is justified weak 
repair for (0, aic(P)). 

(<=) By Theorem [TJ {+a \ a G Af} U { — a \a ^ Af} is a minimal set containing 
{—a | a ^ Af} and closed under aic(P). By Lemma U Af is a model of P M . Let 
Af' C Af be a model of P M . Again by Lemma[Q {+a \ a G Af'} U {-a | a £ Af } 
is closed under aic(P). It follows that {+a \ a G Af'} U {-a \ a ^ Af} = { + a \ a G 
Af } U {-a | a £ Af }. Thus, Af' = Af and so, Af is a minimal model of P M , that is, 
an answer set of P. □ 
We now move on to results concerning upper bounds (membership) and derive 
the main results of this section. 

Lemma 2 

Let r\ be a finite set of normal active integrity constraints and let W be a finite set 
of update actions. There is the least set of update actions W such that l/CW and 
W is closed under r\. Moreover, this least set W can be computed in polynomial 
time in the size of rj and U . 

Proof: We prove the result by demonstrating a bottom-up process computing W. 
The process is similar to that applied when computing a least model of a Horn 
program. We start with Wo = U, Assuming that W, has been computed, we identify 
in T] every active integrity constraint r such that nup(r) C lit(Wi), and add the 
head of each such rule rto W,. We call the result Wj+i. If Wj+i = W%, we stop. It is 
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straightforward to prove that the last set constructed in the process is closed under 
77, contains U, and is contained in every set that is closed under 77 and contains IA. 
Moreover, the construction can be implemented to run in polynomial time. □ 

Theorem 7 

Let X be a database and 77 a set of normal active integrity constraints. Then checking 
if there exists a justified repair (justified weak repair, respectively) for (X, 77) is an 
NP-complcte problem. 

Proof: By Theorem 0] it is enough to prove the result for justified weak repairs. 

(Membership) The following algorithm decides the problem: (1) Nondctcrminis- 
tically guess a consistent set of update actions £ . (2) Compute ne(I,X o £). (3) 
If £ n ne(X,X o £) ^ return NO. Otherwise, compute the least set W of update 
actions that is closed under 77 and contains ne(X,X o £). (4) If W = £ Une(I,Io£ ), 
then return YES. Otherwise, return NO. From Lemma [2j it follows that the algo- 
rithm runs in polynomial time. From Theorem [TJ it follows that the algorithm is 
correct. 

(Hardness) The problem of the existence of an answer set of a simple normal logic 
program P is NP-complctc. By Theorem [4] and Theorem [6l P has an answer set if 
and only if there exists a justified weak repair for (0, aic(P)). Since aic(P) can be 
constructed in polynomial time in the size of P, the result follows. □ 

Lemma 3 

Let 77 be a finite set of active integrity constraints and let W and U" be sets of 
update actions. The problem whether there is a set IA of update actions such that 
U is closed under 77 and M'CHc U" is in NP. 

Proof: Once we nondeterministically guess IA, checking all the required conditions 
can be implemented in polynomial time. □ 

Lemma 4 

Let 77 be a finite set of active integrity constraints, X a database, and £ be a set of 
update actions. The problem whether there is a set £' C £ of update actions such 
that Xo£' |= 77 is in NP. 

Proof: Once we nondeterministically guess £, checking all the required conditions 
can be implemented in polynomial time. □ 

Theorem 8 

Let X be a database and 77 a set of active integrity constraints. The problem of the 
existence of a justified weak repair for (X, 77) is a E.f -complete problem. 

Proof: (Membership) The problem can be decided by a nondeterministic polyno- 
mial-time Turing Machine with an NP-oracle. Indeed, in the first step, one needs 
to guess (nondeterministically) a consistent set £ of update actions. Setting U = 
£ U 7ie(X, X o £), one needs to verify that 

1. £Dne{X,Xo£) = 

2. U is closed under 77 
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3. for each W such that ne(X,X o £) <Z U' C U and W closed under 77, W = U 
(by Lemma [3j one call to an NP-oracle suffices). 

(Hardness) The problem of the existence of an answer set of a simple disjunctive 
logic program P is £.f -complete. By Theorem |6j P has an answer set if and only if 
there exists a justified weak repair for (0, aic(P)}. Thus, the result follows. □ 

Theorem 9 

Let I be a. database and 77 a set of active integrity constraints. The problem of the 
existence of a justified repair for (X, 77) is a S^-complete problem. 

Proof: (Membership) The problem can be decided by a nondcterministic polyno- 
mial-time Turing Machine with an NP-oracle. Indeed, in the first step, one needs 
to guess (nondetcrministically) a consistent set £ of update actions. Setting U = 
£ U ne(X,X o £), one needs to verify that 

1. £C\ne{l 1 lo£) = 

2. U is closed under 77 

3. for each W such that ne(I,lo £) C U' C U and W closed under rj, W =U 
(by Lemma [31 one call to an NP-oracle suffices) 

4. for each £' such that £' C £. Xo£' ^ 77 (By Lcmma[4] one call to an NP-oracle 
suffices). 

(Hardness) Since for the class of instances (0, aic(P)) justified weak repairs coin- 
cide with justified repairs (Theorem [3]), the result follows. □ 

8 Some implications of the results obtained so far 

We recall that given a database X and a set 77 of aic's, the goal is to replace X 
with X' so that X' satisfies 77. The set of update actions needed to transform X into 
X' must at least be a repair for (I, 77) (assuming we insist on change-minimality, 
which normally is the case). However, it should also obey preferences captured 
by the heads of constraints in 77. Let us denote by R(Z, 77), WR(1, 77), FR(X, 77), 
FWR(1, 77), JR(Z, rj), and JWR(1, 77) the classes of repairs, weak repairs, founded 
repairs, founded weak repairs, justified repairs and justified weak repairs for (X, 77), 
respectively. Figure Q] shows the relationships among these classes, with all inclu- 
sions being in general proper. Under each class we also give the complexity of 
deciding whether a repair from that class exists. 

Thus, given an instance (X, 77} of the database repair problem, one might first at- 
tempt to select a repair for (X, 77) from the most restricted set of repairs, JR(I, rj n ). 
Not only these repairs are strongly tied to preferences expressed by 77 — the re- 
lated computational problems are relatively easy. The problem to decide whether 
JR(I, rj n ) is empty is NP-complete. However, the class JR(X, 77™) is narrow and 
it may be that JR(Z, r) n ) = 0. If it is so, the next step might be to try to repair 
X by selecting a repair from JR(I, rj) . This class of repairs for (X, 77) reflects the 
preferences captured by 77. Since it is broader than the previous one, there is a bet- 
ter possibility it will be non-empty. However, the computational complexity grows 



Active Integrity Constraints and Revision Programming 25 

PR(I,ij B ) 

[E^-c] 
II 

JR(l,rj n ) C JR(X,r?) C FR(lt|) C R(X, 77) = R(X,77' 1 ) 
[TVP-c] [E?,-c] [E|-e] [7VP-c] [JVP-c] 

H in in in in 

JWR(I,f|") C JWR(l,r() C FWR(J,77) C WR(I,i)) = WR(I,i) n ) 
[AP-c] [E|-c] ' [AP-c] ' [JVP-c] [NP-c] 

II 

FWR(I, 

[JVP-c] 

Fig. 1. Relationships among classes of repairs 



— the existence problem for JR(Z, 77) is Ep-complete. If also JR(Z, 77) = 0, it still 
may be that founded repairs exist. Moreover, deciding whether a founded repair 
exists is not harder than the previous step. Finally, if there are no founded repairs, 
one still may consider just a repair. This is not quite satisfactory as it ignores 
the preferences encoded by 77 and concentrates only on the constraint enforcement. 
However, deciding whether a repair exists is "only" NP-completc. Moreover, this 
class subsumes all other classes of repairs and offers the best chance of success. 

We note that if we fail to find a justified or founded repair in the process described 
above, we may decide that respecting preferences encoded in aic's is more important 
than the minimality of change postulate. In such case, rather to proceed to seek 
a repair, as discussed above, we also have an option to consider justified weak 
repairs of (I,ff), where the existence problem is S^-complete and, then founded 
weak repairs for (1,77), where the existence problem is NP-complctc. 

Finally, we point out that when we choose a smaller class A of repairs (e.g., 
JR(Z, 77™)) instead of a more general one A' (e.g., JR(Z, 77)) we observe an im- 
portant (and desirable) effect on consistent query answering. In consistent query 
answering (conservative reasoning) an atom o is true if it belongs to every repaired 
database, false if it does not belong to any repaired database, and unknown other- 
wise, that is, when it belongs to a proper subset of the set of repaired databases. 
It is clear that if A C A', the set of the true atoms under A' is a subset of the set 
of the true atoms obtained by applying A, and the same holds for atoms that are 
false. In other words, the stronger the semantics, the larger the set of atoms that 
receive a definite truth value (are true or false). 



9 Revision Programming — an Overview 

We review the basic terminology of revision program ming , and recall t he two seman- 
tics introduced by Marek, Truszczyhski and Pivkina 1994 ; 1998tl200ll the semantics 
of supported revisions, and the semantics of justified weak revisions (originally re- 
ferred to as justified revisions and renamed here for consistency with the general 
naming schema we use). 

Revision literals. A revision literal is an expression in(a) or out(a), where a G At. 
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Revision literals in(a) and out (a) are duals of each other. If a is a revision literal, 
we denote its dual by a D . We extend this notation to sets of revision literals. Wc 
say that a set of revision literals is consistent if it does not contain a pair of dual 
literals. Revision literals represent elementary updates one can apply to a database. 
We define the result of applying a consistent set U of revision literals to a database 
X as follows: 

IffiW=(lU{d |in(o) e U}) \ {a |out(a) G U}- 

Revision rules, normal rules and constraints. A revision rule is an expression 
of the form 

r = ai| . . . \a k <- Pi, ■ ■ ■ ,/3 m , (5) 

where k, m > 0, k + m > 1, and a* and Pj are revision literals. The set {ai, . . . ,a k } 
is the head of the rule j5]); we denote it by head(r). Similarly, the set {Pi, . . . , P, n } 
is the body of the rule ([5]); we denote it by body(r). A revision rule is normal if 
\head(r)\ < 1. As in the case of active integrity constraints, we denote the empty 
head as _L. We call rules with the empty head constraints. If \body(r) \ = we omit 
the implication symbol. Examples of revision rules are: (1) in(a)|out(6) <— in(c), 
(2) in(a)|in(c), (3) in(a) 4- out(6), and (4) _L in(a), out(fc). The second rule 
is an example of a rule with the empty body, the third one is an example of a 
normal rule and the last one is an example of a constraint. The informal reading of 
a revision rule, say the first rule given above, in(a)|out(6) <— in(c), is: insert a or 
delete b, if c is present. 

Revision programs. A revision program is a collection of revision rules. A revision 
program is normal if all its rules are normal. 

Entailment (satisfaction). A database X satisfies a revision literal in(a) (out (6), 
respectively), if a € X (b ^ X, respectively). A database I satisfies a revision rule 
§5§ if it satisfies at least one literal oti, 1 < i < k, whenever it satisfies every literal 
Pj, 1 < j < m ■ Finally, a database X satisfies a revision program P, if X satisfies 
every rule in P. We use the symbol |= to denote the satisfaction relation. 

For revision literals a = in(a) and P = out(6), we set lit{a) = a and lit(p) = 
not b. We extend this notation to sets of revision literals. We note that every 
database interprets revision literals and the corresponding propositional literals 
in the same way. That is, for every database X and for every set of revision literals 
L, X |= L if and only if I \= lit(L). 

It follows that a revision rule ([5]) specifies an integrity constraint equivalent to 
the propositional formula: lit(Pi), . . . ,lit(fi m ) D litiai), . . . , lit(ak)- However, a 
revision rule is not only an integrity constraint. Through its syntax, it also encodes a 
preference on how to "fix" a database, when it violates the constraint. Not satisfying 
a revision rule r means satisfying all revision literals in the body of r and not 
satisfying any of the revision literals in the head of r. Thus, enforcing the constraint 
means constructing a database that (1) does not satisfy some revision literal in the 
body of r, or (2) satisfies at least one revision literal in the head of r. The underlying 
idea of revision programming is to prefer those revisions that result in databases 
with the property (2). 
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As an example, let us consider the revision rule r = in(a) ^— out(6), and the 
empty database X. Clearly, X does not satisfy r. Although X can be fixed either 
by inserting a, so that head(r) becomes true, or by inserting b, so that body(r) 
becomes false, the syntax of r makes the former preferred. 

Normal revi sion programs were introduced and studied by Marek and Truszczyh- 



ski ll994t Il998l who proposed the syntax and the semantics of sup ported and justi 



fied weak revisions. The formalism was extended by Pivkina l2001l to allow disjunc- 
tions of revision literals in the heads of rules, and the semantics of justified weak 
revisions was generalized to that case. We will now recall these definitions. 

First, we define the notion of the inertia set. Let I and TZ be databases. We define 
the inertia set wrt I and TZ, denoted 1(1,71), by setting 

1(1, TZ) = {in(a) |«elnR}U {out(o) a £ X U TZ}- 

In other words, 1(1, TZ) is the set of all no-effect revision literals for X and TZ, that 
is, revision literals that have no effect when revising X into TZ. 

Now, let P be a normal revision program and TZ be a database. By P-r we denote 
the program obtained from P by removing each rule r € P such that TZ ^= body(r). 

Definition 5 (SUPPORTED UPDATES AND SUPPORTED REVISIONS) 

Let P be a normal revision program and X a database. A set IA of revision literals 
is a supported update of X wrt P if IA is consistent and IA = head(Pz<$u) ■ A set £ 
is a supported revision of I wrt P if £ = IA \ I(X,X © IA), where IA is a supported 
update. □ 

Intuitively, a consistent set IA of revision literals is a supported update if it is 
precisely the set of literals "supported" by P and the database resulting from 
updating X with IA. Eliminating from a supported revision all no-effect literals 
yields a supported revision. 

While not evident explicitly from the definition, supported updates an d revis ions 



guarantee constraint enforcement, as proved by Marek and Truszczvhski 11998 



Proposition 3 

Let P be a normal revision program and X a database. If £ is a supported revision 
of P, then X © £ \= P. □ 

Supported updates do not take into account the inertia set. Supported revisions 
do, but only superficially: simply removing no-effect literals from the corresponding 
supported update. It is then not surprising that supported updates and revisions 
may be self-grounded and non-minimal, as we show in the following example. 

Example 8 

Let P be a revision program containing the rules {in(a) <— in(6), in(fc) ^— in(a), 
in(c) 4— out(d)}, and let X the empty database. X does not satisfy P as it violates 
the rule in(c) ^— out(d). One can check that set IA = {in(a), in(6), in(c)} modeling 
the insertions of a, b and c, is a supported update and a supported revision. However 
it is not minimal as its subset {in(c)} is sufficient to guarantee the satisfaction of 
P. □ 
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The problem in the previous example is self-groundedness or the circularity of 
support between in(a) and in(6). Each of them supports the other one but the set 
containing both is superfluous. To address the problem, Marek and Truszczynski 
1994 ; 19981 proposed for normal revision programs the sem antics of justified weak 



revisions, later extended to the disjunctive case by Pivkina l2001l The idea was to 
"ground" justified weak revisions in the program and the inertia set by means of a 
minimal closure. 

Definition 6 (MINIMAL CLOSED SETS OF REVISION LITERALS) 

A set Li of revision literals is closed under a revision program P (not necessarily 
normal) if for every rule r £ P, whenever body(r) C U, then head(r) n hi ^ 0. If hi 
is closed under P and for every set U' QU closed under P, we have hi' = U, then 
hi is a minimal closed set for P. □ 

With this definition in hand, we can define the concepts of justified updates and 
justified weak revisions. 

Definition 7 (JUSTIFIED UPDATES AND JUSTIFIED WEAK REVISIONS) 

Let P be a revision program and let I be a database. A consistent set hi of revision 
literals is a P -justified update for X if it is a minimal set closed under PUl(X, X®U). 

If hi is a P-justified update for X, then hi \ 1(1,1 ® hi) is a P-justificd weak 
revision for X. □ 

We note that PLSI(X,X®U) is well defined as revision literals (and so, in particular, 
the revision literals in I(X,X(Bhi)) are special revision rules (normal and with empty 
bodies). 

The inertia set plays an essential role in the definition, as it is used directly 
in the definition of a P-justificd update. Again, it is not self-evident from the 
definition that justified updates and justified weak revisions, when applied to an 
initial database yield a database satisfying the program. However, the definition 



does indeed imply so (jMarek and Truszczynski Il998t iPivkinal . 120011 ) . 



Proposition 4 

Let P be a revision program and X a database. If hi is a justified update or justified 
weak revision of P, then X @ U |= P. □ 

We poi nt out that the original te r m for the justified weak revisions was justified 
revisions ( Marek and Truszczynski . 19981) . We changed the name for consistency 



with the naming schema we used for active integrity constraints. 



10 A Family of Declarative Semantics for Revision Programming 

The two semantics in the previous section were defined based on how revisions are 
"grounded" in a program, an initial database, and the inertia set. The fundamental 
postulates of constraint enforcement and minimality of change played no explicit 
role in those considerations. The first one is no problem as it is a side effect of each 
of the two types of groundedness considered (cf. Propositions [3] and [4|. The sec- 
ond one does not hold for supported revisions. And while Marek and Truszczynski 
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19981 proved that justified weak revisions are change-minimal in the case of normal 



revision programs, it is not so in the general case. 
Example 9 

Let P be a revision program consisting of the rules in(a)|out(6), out(a)|in(6), and 
let X be the empty database. It is easy to verify that set {in(a), in(6)} is a justified 
weak revision. However, it is not minimal as X is already consistent and no update 
is needed (or, in other words, the empty update fixes the consistency). □ 

We will now develop a range of semantics for revision programs by taking the 
postulates of constraint enforcement and minimality of change explicitly into con- 
sideration. 

Definition 8 (Weak Revisions and Revisions) 

A consistent set U of revision literals is a weak revision of X wrt a revision program 
P if (1) U fl I(X,I © U) = (relevance — all revision literals in U actually change 
X or, in other words, none of them is a no-effect literal wrt X and X © U); and (2) 
X (B U \= P (constraint enforcement). Further, U is a revision of X with respect to 
a revision program P if it is a weak revision and for every U' C U, X ®W' |= P 
implies that W =U (minimality of change). □ 

Example 10 

Let P be the program consisting of the two rules from Example |9] and the rule 
in(c) <r- out(d). As before, let X = 0. There are several weak revisions of X with 
respect to P, for instance, U\ = {in(d)}, U2 = {in(d), in(a), in(6)}, IA3 = {in(c)}, 
and U4 = {in(c), in(a), in(&)}. The weak revisions U\ and U3 are minimal and so, 
they are revisions. □ 

(Weak) revisions do not reflect the preferences on how to revise a database en- 
coded in the syntax of revision rules. Justified weak revisions and supported revi- 
sions, which we discussed in the previous section, do. 

Examvle 1 1 0\ (continued) 

Both the semantics of supported revisions and justified weak revisions exclude the 
weak revisions U\ = {in(d)} and U2 = {in(rf), in(a), in(6)}, in favor of U3 = 
{in(c)} and^4 = {in(c), in(a), in(6)} (U3 and £4 indeed are supported and justified 
weak revisions), thus preferring to satisfy the head of the rule in(c) out(rf) rather 
than to violate its the body. Indeed, one can check that U3 and U4 are indeed both 
supported and justified weak revisions, while U\ and IA2 are neither. □ 

We will now introduce several additional semantics that aim to capture this 
preference. First, we define a new semantics for revision programs by strengthening 
the semantics of justified weak revisions. We do so simply by imposing change- 
minimality explicitly. 

Definition 9 (JUSTIFIED REVISIONS) 

Let P be a revision program and let I be a database. A P-justified weak revision 
8 for I is a P-justiGcd revision for X if £ is a revision of X wrt P (that is, for every 
set £' C £ such that X © £' \= P, £' = £). □ 
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Example{W[ (continued) 

Let us consider again Example [TUl The set U3 is a P-justified revision for X, while 
Ua is not, reflecting the fact that we require that P-justificd revisions be revisions 
(that is, satisfy change minimality). □ 

Justified revisions have several useful properties. They are change-minimal and 
are grounded in the program and the inertia set. However, as stable models of 
logic programs, to which they are closely related, in some settings they may be too 
restrictive. 

Example 11 

Let P = {in(a) <— in(a), in(a) 4— out (a)} and let X = 0. Clearly, X is inconsistent 
with respect to P. The set U = {in(a)} is a revision of X and one might argue that 
P provides it a justification: the two rules together "force" a into X, as in any 
particular situation one of them applies and provides a justification for in(a). This 
type of an argument is known as "reasoning by cases." However, one can check that 
U is not a P-justified revision of X and not a P-justified weak revision, either. Thus, 
justified (weak) revisions in general exclude such reasonings as valid. □ 

To provide a semantics capturing such justifications, we introduce now the con- 
cept of foundedness and the semantics of founded (weak) revisions. We follow closely 
intuitions behind founded (weak) repairs. 

Definition 10 (Founded (weak) revisions) 

Let X be a database, P a revision program and, and £ a consistent set of revision 
literals. 

1. A revision literal a is P- founded wrt X and £ if there is r £ P such that 
a £ head(r), I®£\= body(r), andX©£ |= f3 D , for every (3 £ head(r) \{a}. 

2. The set £ is P- founded wrt X if every element of £ is P-founded wrt X and 
£. 

3. £ is a P-founded (weak) revision for X if £ is a (weak) revision of X wrt P 
and £ is P-founded wrt X. □ 

It is clear from the definition that P-foundedness of a revision literal a with 
respect to a consistent set of revision literals £ can be established by considering 
rules in P independently of each other, which supports reasoning by cases such as 
the one used in Example ITTI (in this specific case, in(a) is founded either because of 
the first rule or becaue of the second rule). Indeed, one can verify that the revision 
U in Example ITTI is founded. 

We note that condition (3) of the definition guarantees that founded (weak) 
revisions enforce constraints of the revision program. Next, directly from the defi- 
nition, it follows that founded weak revisions are weak revisions. Similarly, founded 
revisions are revisions and so, they are change-minimal. Furthermore, founded revi- 
sions are founded weak revisions. However, there are (weak) revisions that are not 
founded, and founded weak revisions are not necessarily founded revisions, that is, 
are not change-minimal. The latter observation shows that foundedness is too weak 
a condition to guarantee change-minimality. 
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Example 12 

Let P be the revision program containing the rules {in(fe) <— in(a), in(a) <— 
in(6), in(c) out(d)} and T the empty database. The set {in(rf)} is a revision of 
1 wrt P. Therefore it is a weak revision of 1 wrt P. However, it is not a P-founded 
weak revision for 1. Therefore, it is not a P-founded revision for 1, either. The 
set {in(c), in(a), in(&)} is a P-founded weak revision for 1 but not a P-founded 
revision for 1. Indeed, {in(c)} is also a revision of X wrt P. □ 

In the case of normal revision programs, founded weak revisions coincide with 
supported revisions. 

Theorem 10 

Let P be a normal revision program and X a database. A set £ of revision literals 
is a P-foundcd weak revision of X if and only if £ is a P-supported revision of 1. 
□ 

Proof: (=>•) Let £ be a P-founded weak revision of X and let U = £ U (1(1,1® £) D 
head(PxQs)) ■ As £ is a weak revision of I with respect to P, £ n 1(1,1 © £) = 0. 
Therefore, £ = U\I(1,1®£) andZffi£ = 1®U. It follows that £ = U\ 1(1,1 ®U) 
and so, it will suffice to prove that W is a supported update of X with respect to P. 
To this end, we first note that U is consistent. Indeed: 

1. £ is consistent (it is a weak revision); 

2. I(X,X © £) is consistent; 

3. If a € £ then the literal a D £ 1(1,1® £). 

Next, we prove that hi = head(Px<$u) ■ Let a G hi. We have two cases: either 
a G 1(1,1® £)C\head(Px®£) or a G £. The first case trivially verifies the assertion. 
In the second case, as £ is a P-founded weak revision of X, there exists r £ P such 
that a = head(r) and 1 © £ (= body(r) (cf. Definition 5). Thus, r £ Pr©£ and 
a G head(Px®s)- AsT©£=ZffiZ//we have a e head(Px@u)- 

Conversely, let a £ head(Px®u)- We have two cases: a G 1(1,1 © £), and a 
1(1,1 © £). In the first case, a &U (by the definition of W). In the second case, we 
reason as follows. Since a G head(Px®u), there exists r G P such that a = head(r) 
and X © W |= body(r). Thus, I © £ |= body(r). As £ is a weak revision, 1 © £ |= r. 
Consequently, Xffi£ |= a. Since a ^ 1(1,1® £), 1 y= a and so, a G £. Thus, a 6W. 

(<=) Let £ be a P-supportcd revision of I. It follows that £ = U\I(X,X®U), where 
U is a P-supportcd update of I wrt P. It follows that 1®£ = X®U. Consequently, 
£n 1(1,1 ®£) = and, by Proposition O I © £ |= P. Since £ C £ is consistent 
and so, £ is a weak revision of P. 

Let a G £. As £ C U, there exists r G P such that a = head(r) and I © W |= 
body(r). Thus, I© £ |= body(r), too. Consequently, a is P-founded wrt I and £. 
It follows that £ is a P-founded weak revision of 1. □ 

At an intuitive level, we already argued earlier that foundedness is less restric- 
tive than the condition defining justified updates, which is behind justified (weak) 
revisions. We will now make this intuition formal. 
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Theorem 11 

Let P be a revision program and let X be a database. If a set £ of revision literals 
is a P-justified (weak) revision of X, then it is a P -founded (weak) revision of I. 

Proof: Let £ be a P-justified weak revision of X. By Proposition HI X © £ \= P. 
Moreover, there is a P-justificd update U for X such that £ =U\ I(X,X ®U). It 
follows that I © U = X © £ and £ ("1 1(X,X® £) = 0. Since W s consistent (by the 
definition), £ is consistent and so, £ is a weak revision of X with respect to P. 

To show that £ is a P-foundcd weak revision of X, we need to prove that £ is 
P-founded wrt X. Let a € £ . We recall that by the definition, W is a minimal set 
closed under P U I(X,X ®U). As W is minimal, W =U\ {a} is not closed under 
P U I(X, X © £Y). As a g I{X,X © U) there is a revision rule r G P such that 
body{r) C W and head(r) nW = 0. Since C W, 6ody(r) C It follows that 
X®U^ body(r) and so, Xffi£ |= 6d(r). 

We recall that W is closed under P. Thus, head(r) PiU = {a}. Let /3 £ head(r) \ 
{a}. It follows that /3 £ W and so, j3 £ and (3 I(X,X © U). If X |= /3, then 
/3 £ I(X,X®U) implies that IffiW ^ If X ^ /?, then /3 g £ implies Xffi£ ^ /?• In 
each case X© £ It follows that a is P-founded wrt I. Thus, £ is P-founded 

wrt X and so, it is a P-founded weak revision of X 

Next, let us assume that £ is a P-justified revision of X. Then, £ is a P-justificd 
weak revision of X and so, a P-founded weak revision of I (by the argument above). 
In particular, it is P-founded wrt X. Moreover, since £ is a P-justificd revision of 
X, it is a revision of X wrt P. Therefore, £ it is a P-founded revision of X wrt P. □ 

The converse implications do not hold in general (cf. Example I lip . 

As in the case of active integrity constraints, revision rules can be normalized. 
Namely, for a revision rule r = a± \ . . . \at 0by r" we denote the set of normal 
revision rules as follows: r" = {r}, if k < 1 or, if k > 2, r™ = {ri, . . . , r^}, where 
ri = on af, . . . , otfLi, Oif +1 , . . . , a®, <f>. For a revision program P, we define 
P™ = UreP r "- O ne can prove the following result (we omit the details as they are 
quite similar to those we presented above). 

Theorem 12 

Let P be a revision program and let X be a database. A set £ of revision literals 
is a (weak) revision of X with respect to P n (P™-foundcd (weak) revision of X, 
respectively) if and only if it is a (weak) revision of X with respect to P (P-foundcd 
(weak) revision of I, respectively). Moreover, if £ is a P™-justificd (weak) revision 
of X, then it is a P-justified (weak) revision of X. 

To summarize our discussion so far, revision programs can be assigned the se- 
mantics of (weak) revisions, justified (weak) revisions and founded (weak) revisions. 
Thanks to Theorem [121 we can also assign to a revision program P the semantics 
of P"-justified revisions. Let us denote the classes of the corresponding types of 
revisions by Rev(I,P), WRev(X,P), JRev(I, P), JWRev(I,P), FRev(I, P) 
and FWRev(I, P). The relationships between the semantics we discussed above 
are demonstrated in Figure [2] One can show that none of the containment relations 
can be replaced with the equality 



Active Integrity Constraints and Revision Programming 



33 



FRevfl, P") 

II 

JRev(Z, P u ) C JRevfI,P) C FRevfI t P) C Rev(X, P) 

II in in in 

JWRev(X, P n ) C JWRev(I. P) C FWRev(X, P) C WRevfl. P) 

II 

FWRev(I, P n ) 

Fig. 2. The containment relations for the semantics of revision programs 

The similarities revision programs show to sets of active integrity constraints are 
striking. In the next section, we will now establish the precise connection. 

11 Connections between Revision Programs and Active Integrity 

Constraints 

To relate revision programs and active integrity constraints, we first note that we 
can restrict the syntax of revision programs without affecting their expressivity. 

A proper revision rule is a revision rule that satisfies the following condition: any 
literal in the head is not the dual of any literal in the body. 

Let P be a revision program and let r\ and r 2 be revision rules 

a\ai \ . . . \a k <- oP , f3 1 , . . . , (3 m 

and 

ai | ... \a k <- a D ,Pi, . . . ,p m , 
respectively (that is, r 2 differs from r\ in that it drops a from the head). 
Lemma 5 

Let I be a database. Under the notation introduced above, a set of revision literals 
hi is a (weak) revision of X with respect to P U {ri} (P U {ri}-foundcd (weak) 
revision, P U {ri}-justificd (weak) revision of I, respectively) if and only if hi is a 
(weak) revision of X with respect to P U {r 2 } (P U {^-founded (weak) revision, 
P U {r2}-justificd (weak) revision of I, respectively). 

Proof: The claim is evident for the case of weak revisions and revisions. The case 
of justified (weak) revisions follows from the observation that a consistent set U of 
revision literals is a closed set for P U {ri} U I {I, I@U) if and only if U is a closed 
set for P U {r 2 } U I(X,X® U). 

For the case of founded (weak) revisions, it is enough to prove that a set U of 
revision literals is P U {ri}-foundcd wrt I if and only if IA is P U {^-founded wrt 
I. When proceeding in either direction, we have that U is consistent. 

Let (3 G hi be P U {ri}-founded wrt I and U, and let r 6 P U {ri} be the rule 
providing support to [3. If r ^ r\, r £ P and so, (3 is P U {r2}-founded wrt I and U. 
Thus, let us assume that r = r%. If /3 = a, then a £ Li and, consequently, I@U \= a. 
Since X © U \= body(ri), X © U |= oP , a contradiction. Thus, f3 ^ a. It is easy to 
see that in such case, r 2 supports /3 (given LP). Thus, is P U {r2}-founded wrt I 
in this case, too. It follows that hi is P U {^j-founded wrt X. 

Conversely, let (3 £ U be P U {r 2 }-foundcd wrt I and hi, and let r £ P U {r 2 } be 
the rule providing support to f3. As before, if r ^ r 2 , the claim follows. If r = r 2 , 



Rev(X, P n ) 

in 

WRev(X, P n ) 
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then P 7^ a. Since r-i supports /3, one can check that n supports, /3, too. Thus, (3 is 
P U {ri}-founded wrt I and U. Consequently, U is P U {ri}-founded wrt I □ 
Lemma [5] shows that the literals in the head of a revision rule which are dual of 
literals in the body are useless and can be dropped. In other words, there is no loss 
of generality in considering just proper revision programs. 

Example 13 

Let P be the revision program containing the rules {in(&)|out(a) <s— in(a), out(c?)| 
in(c) <— out(c)}. Its properized version is {in(6) ^— in(a), out(c?) <— out(c)}. □ 

Theorem 13 

Let P be a revision program. There is a proper revision program P' such that for 
every database I, (weak) revisions of I with respect to P (P-founded (weak) revi- 
sions, P -justified (weak) revisions of X, respectively) coincide with (weak) revisions 
of I with respect to P' (/"-founded (weak) revisions, -P'-justified (weak) revisions 
of I, respectively). 

Proof: Lemma [5] implies that the program P' obtained from P by repeated appli- 
cation of the process described above (replacement of rules of the form r\ with the 
corresponding rules of the form r^) has the required property. □ 
We denote the "properized" version of a revision program P as prop(P). 
We extend to revision literals the operator ua(-) defined for propositional literals. 
If a = in(a), we define ua{a) = +a. If a = out (a), we define ua(a) = — a. 

Definition 11 

Given a proper revision rule r of the form 

ai\ . . . \a k <- /3i,.../3 m 

we denote by AIC(r) the active integrity constraint 

lit(Pi), . . . , lit(P m ), lit(ai) D , . . . , lit(ak) D D ua(cti)\ . . . \ua(ak)- □ 

For example, given the proper revision rule r : in(a) ^— out(&), the correspond- 
ing active integrity constraint AIC(r) is of the form not b, not a D +a. We note that 
if r is a constraint (k = 0), AIC(r) is simply an integrity constraint. The operator 
AIC(-) is extended to proper revision programs in the standard way. It is easy to 
show that for each database I, X |= P if and only if I \= AIC(P). The following 
lemma establishes a direct connection between the concepts of closure under active 
integrity constraints and revision programs. 

Lemma 6 

Let r be a proper revision rule. A set £ of revision literals is closed under P if and 
only if ua(£) is closed under AIC(r). 

Proof: First, we observe that as r is proper, nup(AIC(r)) = lit (body (r)). Moreover 
head(AIC(r)) = ua(head(r)). We know that £ is closed under r if and only if 
body(r) % £ ox head(r) n £ ^ 0. This holds if and only if lit (body (r)) % lit(£) = 
lit(ua(£)) or ua(head(r)) H ua(£) =/= 0, which is equivalent to nup(AIC(r)) % 
lit(ua(£)) or head(AIC(r)) Dua(£) ^ 0. This, however, is the definition of AIC(r) 
closed under ua(£ )). □ 



Active Integrity Constraints and Revision Programming 



35 



Corollary 3 

Let P be a proper revision program. A set £ of revision literals is a minimal set 
closed under P if and only if ua(£) is a minimal set closed under AIC(r). 

Proof: Straightforward from Lemma El □ 

Theorem 14 

Let P be a proper revision program. A set £ of revision literals is a (weak) revision 
(respectively, P-justified (weak) revision, P-founded (weak) revision) of X wrt P if 
and only if ua(£) is a (weak) repair (respectively, justified (weak) repair, founded 
(weak) repair) for (X,AIC(P)). 

Proof: 

(1) A set £ of revision literals is a weak revision of X wrt P if and only if ua(£) is 
a weak repair for (X, AIC(P)). 

Indeed, by the definition, £ is a weak revision of X with respect to P if and only if 

(a) ln{a | in(a) G £} = 0, {a out(a) G £ } C X; and 

(b) X©£ f= P. 

Similarly, ua(£) is a weak repair for (X, AIC(P)) if and only if 

(a) X (~l {a | + a G ua(£)} = 0, {a — a G ua(£ )} C X; and 

(b) Xoua(£) h AIC(P). 

By our earlier comments, for every database iX, J7" |= P if and only if J |= AIC(P). 
Since X © £ = X o ua(£), the assertion follows. 

(2) Next, we prove that £ is a revision of X wrt P if and only if ua{£) is a repair 
for (X,AIC(P)}. 

By (1), £ is a weak revision of X wrt P if and only if ua(£) is a weak repair for 
(X, AIC(P)}. Moreover, we have that the mapping £ i-> ua(£) is a bijection between 
sets of revision literals and sets of update actions such that X©£ |= P if and only if 
X o ua(£) \= AIC(P). Thus, a set £ of revision literals is such that for each £' C £ 
the fact X © £' (= P implies £' = £ (minimality of £) if and only if ua(£) is a set 
of update actions such that for each T 1 C ua(£) the fact lo J' |= AIC(P) implies 
X' = ua(£) (minimality of uo(£). 

(3) We now prove that £ is a P-justified weak revision of X if and only if ua(£) is 
a justified weak repair for (X, AIC(P)). 

(=>■) Since £ is a P-justificd weak revision of X, there exists a P-justificd weak update 
of X, say U, such that £ = U\I(I,I®U). By the definition, W is consistent and it is a 
minimal set containing 1(1, 1®IA) and closed under P. It follows that the action set 
ua(U) is consistent and, by Corollary|3l it is a minimal set containing ua(I(X,X@U)) 
and closed under AIC(P). We now observe that ua(I(I,I@U)) — ne(I,Ioua(U)). 
Thus, uaiti) is a justified action set for (X, AIC(P)) and ua(U)\neiX,Xoua(U)) = 
ua(£) is a justified weak repair for (X, AIC(P)) . 

(<=) There exists a justified action set for (I, AIC(P)), say W, such that ua(£) = 
U\ne(I,XoU). The action set U is consistent, contains ne(X,XoU) and it is closed 
under AIC(P). By our comments above, there is a set of revision literals V such 
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that uaiV) = U. Moreover, ne(X,X oil) = ua(I(X,X © V)). It follows that the set 
V is consistent and, by Corollary [3l it is a minimal set containing 7(1,1© V) and 
closed under P. Thus, V is a F-justified weak update for X and V \ I(X, X ffi V) = £ 
is a P-justified weak revision for X. 

(4) By (3) and by the argument we used in (2) to show that the minimality of £ is 
equivalent to the minimality of ua(£), £ is a P-justified revision of X if and only if 
ua(£) is a justified repair for (X, AIC(P)). 

(5) Finally, we prove that £ is a P-founded (weak) revision of X if and only if ua(£) 
is a founded (weak) repair for (I,AIC(P)). 

(=>) Let £ be a P-founded (weak) revision of I. By (1) and (2), ua(£) is a (weak) 
repair for (X, AIC(P)) . Therefore, we have to show that ua{£) is founded wrt 
(X, AIC(P)). Let us consider an arbitrary element of ua{£). It is of the form ua(a), 
for some revision literal a£f. 

Since £ is P-founded wrt X, there exists r € P such that X ® £ \= body(r), 
and X © £ |= 7-°, for every 7 G head(r) different from a. Let p be the cor- 
responding active integrity constraint in AIC(P), that is, p = AIC(r). Since 
r is proper, lit(body(r)) = nup(p). Thus, X o ua(£) \= nup(p). Moreover, since 
head(p) = ua(head(r)) , for every S G head(p) other than ita(a), Xoua(E) \= 5 D . 

Thus, ua(a) is founded wrt (X, AIC(P)) and ua{£) and so, ua(£) is founded with 
respect to (X,AIC(P)). 

(-<=) This implication can be proved by a similar argument. We omit the details. □ 
The results of this section show that proper revision programs can be interpreted 
as sets of active integrity constraints so that the corresponding semantics match. 
However, it is easy to see that the mapping AIC(-) is a one-to-one and onto mapping 
between the collection of proper revision programs and the collections of sets of 
active integrity constraints. Thus, also conversely, sets of active integrity constraints 
can be interpreted as revision programs. 

Example 14 

Let rj be the following set of active integrity constraints: 

ri = a, b, note D — a\ + c 
r2 = not d D + d 

r 3 = a D _L 

The corresponding revision program is: 

pi = out(a)|in(c) ^— in(6) 

p 2 = in(d) <- 

p3= -L <- in(a)- 

The correspondence between sets of active integrity constraints and proper revi- 
sion programs allows us to adapt results from one setting to another and conversely. 
Moreover, in many cases, once we have a result for proper revision programs, we 
can lift it to the general case, too. For instance, as in the case of sets of active 
integrity constraints and justified (weak) repairs, a special structure of a revision 
program with respect to the original database ensures minimality of justified weak 
revisions. Specifically, we have the following corollary of Theorem [3] 
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Theorem 15 

Let I be a database and P a revision program such that for each revision literal a 
appearing in the head of a rule in P, X |= a D . If £ is a P-justified weak revision 
for X, then £ is a P-justified revision for X. 

Proof: (Sketch) Clearly, the properized version P' of P also satisfies the assumption 
of the theorem. By the correspondence results between proper revision programs 
and sets of aic's. it follows that E is a P'-justificd revision for X. As X has the same 
justified revisions with respect to P' and P, the result follows. □ 
Moreover, for normal revision programs justified weak revisions are justified re- 
visions no matter what the initial database, as stated in the following corollary to 
Theorem [U The argument is essentially the same as the one above and we omit it. 

Theorem 16 

Let I be a database and P a normal revision program. If £ is a P-justified weak 
revision for I, then £ is a justified revision for X. 



12 Computation and Complexity Results for Revision Programming 

Thanks to the equivalence properties reported in Section [TT] we can derive the 
results about computation and complexity for revision programming from the cor- 
responding results for active integrity constraints presented in Section [7J 

Theorem 17 

Let X be a database and P a normal revision program. Then checking if there 
exists a P-justified revision (P-justified weak revision, respectively) for X is an 
NP-complcte problem. 

Proof. By Theorem [T3] we know that this problem is equivalent to check if there 
exists a P'-justificd revision (P'-justified weak revision, respectively) for X where 
P' is the properized version of P that can be computed in polynomial time. The 
result follows from Theorems [7] and Theorem [TH □ 

Theorem 18 

Let X be a database and P a revision program. Then checking if there exists a 
P-justified revision (P-justified weak revision, respectively) for I is a E^-complctc 
problem. 

Proof. By Theorem [T3] we know that this problem is equivalent to check if there 
exists a P'-justificd revision (P'-justificd weak revision, respectively) for X where 
P' is the properized version of P that can be computed in polynomial time. The 
result follows from Theorems [5J |H] and [TU □ 

Theorem 19 

Let I be a database and P a revision program. Then checking if there exists a 
P-founded revision (P-founded weak revision, respectively) for I is a S.f-complctc 
(NP-complete, respectively) problem. 
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FRev(I, P n ) 
II 

JRev(X, P n ) C JR.ev(Z, P) C FRev(Z, P) C Rev(I, P) = Rev(I, P n ) 

[JVP-c] [Sj.c] (e2. c] [N p. c] [wp _ c] 

II in in in in 

JWRev|I,P"| C JWRev(I.P) C FWRevjl, P) C WRev(I,P| = WRev^P"] 

[JVP-c] [£p-c] [JVP-c] [JVP-c] [JVP-c] 

II 

FWRev(I, P n ) 

[NP-c] 

Fig. 3. Complexity results for the semantics of revision programs 



Proof. By Theorem [13] we know that this problem is equivalent to check if there 
exists a P'-founded revision (P'-founded weak revision, respectively) for X where 
P' is the propcrizcd version of P that can be computed in p olynomial time. The 



result follows from complexity results by Caroprese et al. 120061 and Theorem [TU □ 
We summarize the complexity results obtained in this section in Figure [3l 
We note that comments we made at the end of Section [5] apply here as well. In a 
nutshell, a semantics of justified revisions, reflecting the principles of groundedness 
(no circular "self-justifications") and minimality of change, seems to be well moti- 
vated and so most appealing for applications. However, as we pointed out earlier, 
it may be too restrictive. Thus, in all these cases, when consistency of a database 
needs to be restored and justified revisions do not exist, other semantics may provide 
an acceptable solution. The discussion of that issue, involving also computational 
complexity trade-offs, follows essentially the same line as that in Section [8] 

13 Shifting Theorem 



In this section we study the shifting transformation (jMarek and Truszczynski 1 1 9981 ) . 
The process consists of transforming an instance (X, n) of the database repair prob- 
lem to a syntactically isomorphic instance (I', ?/) by changing integrity constraints 
to reflect the "shift" of I into I'. A semantics for database repair problem has the 
shifting property if the repairs of the "shifted" instance of the database update 
problem are precisely the results of modifying the repairs of the original instance 
according to the shift from I to I'. The shifting property is important. If a seman- 
tics of database updates has it, the study of that semantics can be reduced to the 
case when the input database is the empty set, a major conceptual simplification. 

Example 15 

Let X = {a, b} and let 775 = {a, b D —a\ — b}. There are two founded repairs 
for (X,7? 5 ): £1 = {-a} and £ 2 = {-&}. Let W = {a}. We will now "shift" the 
instance {X, 775) with respect to W. To this end, we will first modify I by changing 
the status in X of elements in W, in our case, of a. Since a £ X, we will remove it. 
Thus, X "shifted" with respect to W becomes J = {&}. Next, we will modify ^5 
correspondingly, replacing literals and update actions involving a by their duals. 
That results in rj' 5 = {not a, b D +a\ — b}. One can check that the resulting instance 
{J,n' 5 ) of the update problem has two founded repairs: {+a} and { — b}. Moreover, 
they can be obtained from the founded repairs for (X, r/$ ) by consistently replacing 
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— a with +a and +a with —a (the latter does not apply in this example). In other 
words, the original update problem and its shifted version are isomorphic. □ 

The situation presented in Example [15] is not coincidental. In this section we 
will show that the semantics of (weak) repairs, founded (weak) repairs and justified 
(weak) repairs satisfy the shifting property. To facilitate the presentation, we placed 
proofs of all the results in the appendix. 

We start by observing that shifting a database I to a database I 1 can be modeled 
by means of the symmetric difference operator. Namely, we have X' = Z-^W, where 
W = I^rl 1 . This identity shows that one can shift any database I into any database 
I 1 by forming a symmetric difference of X with some set W of atoms (specifically, 
W = X-j-Z'). We will now extend the operation of shifting a database with respect 
to W to the case of literals, update actions and integrity constraints. To this end, 
we introduce a shifting operator Tyy. 

Definition 12 

Let W be a database and £ a literal or an update action. We define 

f £ D if the atom of I is in W 
w{ - ' ~ \ £ if the atom of I is not in W 

and we extend this definition to sets of literals or update actions, respectively. 

Furthermore, if op is an operator on sets of literals or update actions (such as 
conjunction or disjunction), for every set X of literals or update actions, we define 

T w (o P (X)) = o P (T w (X))- 

Finally, for an active integrity constraint r = 4> D ip, we set 

T w (r) = T w {<t>) D Twtyy 

We extend the notation to sets active integrity constraints in the standard way. □ 

To illustrate the last two parts of the definition, we note that when op stands 
for the conjunction of a set of literals and X = {Li, . . . , L n }, where every Li is a 
literal, Tw(op(X)) = op(Tw(X)) specializes to 

T w (Li, . . . , L n ) = T w (Li), . . . , T w (L n )- 
Similarly, for an active integrity constraint 

r = Li, . . . , L n D ai\ . . . \a m 
we obtain 

Tyv(r) = T>v(Li), . . . , T w (L n ) D Ty^(a\)\ ...\ T w (a m )- 

To summarize, we overload the notation Tyy an d interpret it based on the type of 
the argument. 
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Theorem 20 (Shifting theorem for (weak) repairs and founded repairs) 

Let X and W be databases. For every set 77 of active integrity constraints and for 
every consistent set £ of update actions, we have 

1. £ is a weak repair for (1, 77) if and only if Tyy(£) is a weak repair for (X -7- 

2. £ is a repair for (1, 77) if and only if Tyy (£) is a repair for (I W, Tyy (77)) 

3. £ is founded for (1, 77) if and only if Tyy(£) is founded for (I -j- W, Tyy(jf)) 

4. £ is a founded (weak) repair for (1,77) if and only if Tw(£) is a founded 
(weak) repair for (X -7- W, Tyj{rf)) 

5. £ is an justified (weak) repair for (1,77} if and only if Tyy(£) is a justified 
(weak) repair for (I-j- W, Tyy (77)). 

Theorem |2"D1 implies that in the context of (weak) repairs, founded (weak) repairs 
or justified (weak) repairs, an instance (X, 77) of the database update problem can be 
shifted to the instance with the empty initial database. That property can simplify 
studies of these semantics as well as the development of algorithms for computing 
repairs and for consistent query answering, as it allows us to eliminate one of the 
parameters (the initial database) from considerations. In many cases it also allows 
us to relate semantics of database repairs to some semantics of logic programs with 
negation. Formally, we have the following corollary. 

Corollary 4 

Let X be a database and 77 a set of active integrity constraints. Then £ is a weak 
repair (repair, founded weak repair, founded repair, justified weak repair, justified 
repair, respectively) for (X, 77} if and only if Tx(£) is a weak repair (repair, founded 
weak repair, founded repair, justified weak repair, justified repair, respectively) for 
(9, 7z(77)>. 

The concept of of shifting can also be stated for revision programming. First, we 
note that the operator Tyy(-) defined above can be extended to revision literals, 
revision rules and revision progr ams. Its formal definition and many properties have 



been presented by Marek et al. |1999. The following theorem gathers those results, 



as well as their extensions to the case of new semantics we introduced in our paper. 
Theorem 21 

(Shifting theorem for revision programs) Let X and W be databases. For 
every revision program G and every consistent set £ of revision literals, we have 

1. £ is a (weak) revision for X with respect to G if and only if Tyy(£) is a (weak) 
revision for X with respect to Tyy(G) 

2. £ is a G-justified (weak) revision for X if and only if Tyy(£) is a Tyv(G)- 
justificd (weak) revision for X 

3. £ is a G-founded (weak) revision for X if and only if Tyy(£) is a Tyy(G)- 
founded (weak) revision for X 
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14 Conclusion 

In the paper we studied two formalisms for describing policies on enforcing integrity 
constraints on databases in the presence of preference s on alternative ways to do 
so: active integrity constraints ( Caroprese et al. . 20061 ) and revision programming 



(jMarek and Truszczvhskil . I199S 

The original semantics proposed for active integrity constraints is based on the 
concept of a founded repair. A founded repair is a set of update actions (insertions 
and deletions) to be performed over the database in order to make it consistent, that 
is minimal and supported by active integrity constraints. The original semantics for 
revision programs is based on the concept of justified revision. A justified revision 
is a set of revision literals that can be inferred by means of the revision program 
and by the inertia set, that is the set of all atoms that do not change their state of 
presence in or absence from a database during the revision process. 

We proved that in the context of their original semantics, these two formalisms 
differ. That is, under some natural interpretation of revision programs as sets of 
active integrity constraints the set of repairs corresponding to justified revisions is 
contained in the set of founded repairs (and the containment is, in general, proper). 
This observation demonstrated that basic intuitions behind the two semantics are 
essentially different and opened a possibility of expanding each formalism by se- 
mantics grounded in the ideas developed in the other one. 

Following this direction, we introduced a new semantics for active integrity con- 
straints, based on ideas underlying revision programming and, conversely, a new 
semantics for revision programs based on intuitions behind founded repairs. With 
the new semantics available, we showed that the interpretation of revision programs 
as sets of active integrity constraints, mentioned above, establishes a precise match 
between these two formalism: it preserves their semantics once they are correctly 
aligned. In other words, we proved that the two formalisms are equivalent through a 
simple modular (rule- wise) syntactic transformation. That offers a strong indication 
of the adequacy of each formalism as the foundation for declarative specifications 
of policies for enforcing integrity constraints. Moreover, the broad frameworks of 
semantics we have available in each case provide us with means of handling the 
problem of "non-executability" of the policies encoded into integrity constraints 
under a particular semantics: once that turns out to be the case, one can chose to 
select a less restrictive one. 

For each formalism and each semantics we established the complexity of the 
basic existence of repair (revision) problem. Furthermore, we proved that each 
formalism and each semantics satisfies the shifting property. Shifting consists of 
transforming an instance of a database repair problem to another syntactically 
isomorphic instance by changing active integrity constraints or revision programs 
to reflect the "shift" from the original database to the new one. 

These latter results are essential for relating repair (revision) formalisms we stud- 
ied with logic programming and, specifically, with programs that generalize stan- 
dard disjunctive logic programs by allowing d efault literals also in the heads of 



disjunctive rules (the Lifschitz-Woo programs (jLifschitz and Wool . Il992h : cf. work 
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by Marek at al. 19991 and Pivkina 2001 for some early results exploiting shifting to 
relate revision and logic programming). 

Our work opens and forms the foundation for several research directions. The first 
of them concerns implementations of algorithms for computing repairs (revisions) 
under the semantics discussed here in the first-order setting covering built-in pred- 
icates and aggregates. An important aspect of that research is to identify classes of 
databases and integrity constraints, for which the existence and the uniqueness of 
repairs (revisions) of particular types is assured. 

The second problem concerns consistent query answering in the setting of active 
integrity constraints. The problem is to compute answers to queries to a database 
that is inconsistent with respect to its active integrity constraints without comput- 
i ng the repairs explicitly, thus extending the approach of consistent query answering 



(jArenas et all Il999i l2003t IChomickiL 120071 ) to the setting of active integrity con- 



straints. 

Next, there is the question whether a still narrower classes of repairs could be 
identified based on the analysis of all active integrity constraints (revision program 
rules) that would resolve conflicts among them (multiple possible repairs or revisions 
result precisely from the need to choose which constraint or rule to use when several 
are applicable) either based on their specificity (an approach used with some success 
in default logic) or on explicit rankings of the relative importance of active integrity 
constraints and revision rules. 

Finally, we note that all the semantics discussed in the paper give rise to knowl- 
edge base operators that could be analyzed from the standpoint of Katsuno-Mendel- 
zon postulates. To this end, we observe that we can view a set of databases as the set 
of models o f some formula and so, as a know ledge base in the sense of Katsuno and 
Mendelzon (jKatsuno and Mendelzonl . 119911 ). Let r\ be a set of active integrity con- 
straints and, for the sake of illustration, let us focus our attention on the semantics 
of justified repairs. Given a set of databases (a knowledge base), I, we can assign to 
it another set of databases (knowledge base), I' , consisting of all 77-justified repairs 
of all databases in X, In that way we obtain a knowledge base update operator 
determined by rj and the semantics justified repairs. It is an interesting problem to 
determine which of the Katsuno-Mendelzon postulates are satisfied by that operator 
(and by the other ones that arise by choosing a different update semantics). 
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Appendix 

We present here the proofs of the two shifting theorems. The proofs are based on 
several auxiliary results. 

Lemma 7 

Let W be a database. 

I. For every update action a, Tyy(lit(a)) = lit(Ty^(a)) 

2. For every set A of literals (update actions, active integrity constraints, re- 
spectively) T W {T W (A)) = A 

3. For every consistent set A of literals (update actions, respectively), Ty\>(A) 
is consistent 

4. For every databases 1 and K, T w {ne{2, K)) = ne(l W,ft W) 

5. For every active integrity constraint r, nup(Tyy{r)) — Ty\>(nup(r)). 

Proof: (Jl]) - (J3j follow directly from the definitions. We omit the details. 

4. Let a £ ne(l ^W,K^ W). If a = +a, then it follows that s6(IvW)n 
(71 -j- W). Let us assume that a 6 W. Then a ^ I U TZ and, consequently, 
— a 6 ne(I,lZ). Since a £ W, +a = Tyv( — a). Thus, a G Tyy(ne(T,1Z)). 
The case when a = —a can be dealt with in a similar way. It follows that 
ne(l^W,K^W) C T w (ne(Z,K)). 

Let T = 1 W and W = K W. Then I = 1'tW,K = K'vW and, by 
applying the inclusion we just proved to I' and TV , we obtain 

ne(l,K) = ne(X' ~W,W +W) C T w (ne(X' ,K'))- 
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Consequently, 

T w (ne(X,Tl)) C T w (T w (ne(l',TZ'))) = ne{X W, K W)- 

Thus, the claim follows. 
5. Let £ G nup(T w (r)). We have i G body(T w (r)) and L D ^ lit(head(T w (r)). 
Clearly, head(T w (r)) = T w {head{r)) and body(T w (rj) = T w (body(r)), 
Thus, L e T w (body(r)) and L D £ T w (head(r)). Consequently, Tyv(I) G 
6odj/(r). Moreover, since T W (L D ) = {T W (L)) D , (T W (L)) D head(r). It fol- 
lows that Tw(L) G nup(r) and so, L G Tw(HW£>(r)). Hence, nup(Tw(r)) C 
rw(n«p(r)). 

Applying this inclusion to an active integrity constraint s = TVv(r), wc 
obtain nup(r) C Tw(nup( Tyy (?")))■ This, in turn, implies Tyj{nup(r)) C 
Xyv( Tw(nup( Tyy(r)))) = nup(Tyv(r)). Thus, the equality nup(Tw(r)) = 
Tvv( rl '"p( r )) follows. □ 

Lemma 8 

Let X and W be databases and let L be a literal or an update action. Then 1 1= L 
if and only if X W |= T W (L). 

Proof: (=>) Let us assume that X |= L. If L = a, where a is an atom, then 
a E X. There arc two cases: a G W and a ^ W. In the first case, a ^ I -j- W and 
Tyy(a) = not a. In the second case, a G X -f- W and Tyy(a) = a. In each case, 
X-=-W \= T w (a), that is,I-^Wh T W (L). 

The case L = not a, where a is an atom, is similar. First, we have that a ^ X. 
If a E W then a G I -f- W and T w (not a) = a. If a £ W then a ^ X -j- W and 
Tw(not a) = not a. In each case, I -f- W |= Tw(not a), that is, I -j- W |= Tyy(i). 

(<=) Let us assume that X-=-W |= T W {L). Then, (7vW)v)V = X and T W {T W (L)) = 
L. Thus, X \= L follows by the implication (=>). □ 

Lemma 9 

Let X and W be databases, and let W be a consistent set of update actions. Then 
(X o U) -f- W = (X -T- W) o T W (W). 

Proof: We note that since U is consistent, Ty^iU) is consistent, too. Thus, both 
sides of the identity are well defined. 

Let a g (IoW)t W. If +a G T W (W), then u 6 (It W) o T w (W). Thus, let us 
assume that +a ^ Ty>(U). We have two cases. 

Case 1: a £ W. From the definition of T w , +a U. Since a G (X o -f- W, 
a £ X oU and, consequently, a £ X and —a^lA. Thus, a G (I -r- W) and — a ^ 
Ty\>(U) (otherwise, as Tyv( — a) = —a, wc would have —a G W). Consequently, 
a G (X-=-W) o T W (U). 

Case 2: a G W. From the definition of T w , -a U. Since a G (XoW)-f-W, a <£ XoU. 
Thus, a £ I and +a $ U. It follows that a G X-5-VV and — a ^ Tyy(U) (otherwise we 
would have +a 6 W, as Tyy( — a) = +a, in this case). Hence, a G (X-f-W) o Tw(U). 

If a £ (loW)vW, we reason similarly. If —a G X W (W), then a £ (X^W)o X W (W). 
Therefore, let us assume that — a £ Tyj(JA). As before, there are two cases. 
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Case 1: a £ W and thus — a ^ U. Since a £ (XoU)-^-W, a ^ XoU and, consequently, 
a £ X and +a g U. Thus, a £ (X -j- W) and +a ^ T W (U). Consequently, a <£ 

(jh-w)o r w (w). 

Case 2: a E W and thus + a ^ Zi. In this case, a eloW. Thus, a e X and —a<£U. 
It follows that s^ItW and + a ^ T W (W). Hence, s^(ItW)oT w (W). □ 

Lemma 10 

Let X and W be databases, U a consistent set of update actions, and L a literal or 
an action update. Then X o U |= L if and only if (I W) o T W (W) |= T W (L). □ 

Proof: By Lemma HI XoW |= L if and only if (IoU)-rW \= T W (L). By Lemma HI 
the latter condition is equivalent to the condition (X-j- W) o Ty^ili) |= Tyy(L). □ 

Lemma 11 

Let X and W be databases. For every set 77 of active integrity constraints and for 
every set U of update actions, U is a justified action set for (X, 77) if and only if 
Tw(U) is a justified action set for (X-=- W, Tw(rj)). 

Proof: (=>) We have to prove that Ty^{U) is consistent, and minimal among all 
supersets of ne(X -r- W, (X W) o Tw(U)) that are closed under Tyy (77). 

Since U is a justified action set for (X, 77), ZY is consistent and ne{X,X oti) C Z//. 
The former implies that Tyy(W) is consistent (cf. Lemma [TUT])). The latter implies 
that ne(X -f- W, (X + W) o T W (W)) C T W (W) (cf. Lemma and^. 

Next, we prove that Ty\>(U) is closed under Tyy (77). Let r be an active integrity 
constraint in Ty^irf) such that body(r) is consistent, nup(r) C lit(Ty^(U)). Then, 
there exists s G 77 such that r = Tyy(s). By Lemma[7l[5]), nup(r) = T\\> (rmp(s)) . As 
Tyy(nup{s)) C Zi£(Tw (£/)), we have that nup(s) C litilA). Since Z/Z is closed under 
s, there exists a G head(s) such that a <E U. Thus, we obtain that Tyv(a) G 
Tyv(head(s)) = head(r), and that Tyy(a) G Ty^(JA). Consequently, header) n 
Tyv(U) 7^ 0. It follows that Tyv(U) is closed under r and so, also under 2\v(jy). 

Finally, let us consider a set V of update actions such that ne(X W, (X 
W) o T w (Uj) C V C Xw(W) and closed under Xyy^). By Lemma and El 
ne(X^W, (IvW)oTw(W)) = T w {ne(X,XoU)). Thus, ne{X,XoU) C T W (V) CM. 
From the fact that V is closed under Tyy (77) it follows that Tyv(V) is closed under 
77 (one can show it reasoning similarly as in the previous paragraph). As W is 
minimal in the class of supersets of ne(X,X o U) closed under 77, Tyv(V) = U and 
so, V = Tyy(U). This completes the proof of the implication (=>). 

(<=) If Tw(W) is a justified action set for (X W, Tw (77)), the implication (=>) 
yields that T W (T W (U)) = ZY is a justified action set for ((X W) -f- W = X, 77). □ 

Proof of Theorem [20] 

1. Let us assume that £ is a weak repair for (X, 77). It follows that £ is consistent. 
Since X o £ |= 77, by Lemma \M (X-j- W) o T w (£) |= T w (v)- Th e converse 
implication follows from the one we just proved by Lemma [7)12]) . 

2. As before, it suffices to show only one implication. Let £ be a repair for 
(X, 77}. Then, £ is a weak repair for (X, 77). By (1), £ is a weak repair for 
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(X W, ryv(f?)). Let £' C T w (£) be such that (IvW)of' |= T w (?y). It 
follows that T w (£') C T W (T W {£)) = £. Since £ is consistent, T w (£') is 
consistent, too. By Lemma HU1 and Lemma [TU2J , since (I-f- W) of (= Tw(n), 
then lo T w (£') f= Since £ is a repair and Xyv(£') C £ , T w {£') = £. Thus, 
£' = T w {£) and so, T w {£) is a repair for (X -h W, X w (? ? )). 

3. As in two previous cases, we show only one implication. Thus, let us assume 
that £ is founded for (1,1]). Let a G Tyy(£). It follows that there is /3 E £ 
such that a = Tyy(/3). Since £ is founded with respect to (X, 7/), there is an 
active integrity constraint r such that j3 G head(r), I o £ \= nup(r), and for 
every 7 £ head(r) \ {/?}, lo £ |= -f D . 

Clearly, the active integrity constraint Tyy(r) belongs to Ty\)(rf) and a = 
Tyy(/?) is an clement of head(Tyy(r)). By Lemma , we have nup(r) = 
nup(T w {r)). Thus, by LcmmaOH (Z+W)oT w (£) \= nup{T w (rj). Next, let 
7 G head{T w {r))\{a] . Then, there is 5 G /iead(r)\{/3} such that 7 = T>v(<5). 
Since T o £ \= 7-°, it follows that (X W) o T w (£) \= T W (5 D ), that is, 
(IvW)o T w {£) h 7 D - Thus, a is founded with respect to (1 W, Tw(^)} 
and Tyv(£) and Tyv(f) is founded with respect to (I -r- W, Tyy (77)). 

4. This property is a direct consequence of (1), (2), and (3). 

5. If £ is a justified weak repair for (1, 77}, then £ n ne(I,I o = and £ U 
ne(X,2 o £) is a justified action set for (1,77) (Theorem [1]) . It follows that 
T w (£)nTyv(ne(X,Xo£)) = 0- Moreover, by LemmaHU T w (£:Une(Z,Zof )) 
is a justified action set for {I W, Tyv(r/)}. 

We have T w (ne(X,l o £)) = ne(l W, (X W) o X w (£)). Thus, again by 
Theorem[U Tw(f) is a justified weak repair for (X-=- W, Tw(n)). 
If £^ is a justified repair for (X, 77), then our argument shows that Tyy(£) is 
a justified weak repair for (X W, Tw(n)). Moreover, since £ is a repair for 
X, by Theorem [20l 2) we have that Xyy(£) is a repair for X -7- W. It follows 
that Tyv(£ ) is a justified repair for (X W, Tyy (77)). The other implication 
can now be argued in the same way as in several other similar cases in the 
paper. □ 

Proof of Corollary [4j The assertion follows directly from Theorem [20l □ 
Next we turn to the shifting properties of revision programs. We will derive 
Theorem [21] from Theorem 1201 To this end we need one more lemma. 

Lemma 12 

Let X and W be databases, £ a set of revision literals, G a revision program and 
P a proper revision program. Then Tyy(prop(G)) = prop(Tw(G)), Tyv(ua(£)) = 
ua(T w (£)) and T W (AIC(P)) = aic(T w (P)). 

Proof: Straightforward from the definitions of prop(-), Xyv(-), ua(-) and AIC(-). 
□ 

Proof of Theorem I2U Let P = prop(G) (that is the "properized" version of G). 
The following properties are equivalent: 

1. £ is a (weak) revision for X with respect to G (respectively, G-justificd (weak) 
revision for X, G-foundcd (weak) revision for X) 



48 L. Caroprese and M. Truszczynski 

2. £ is a (weak) revision for I with respect to P (respectively, P-justified (weak) 
revision for I, f-founded (weak) revision for X) 

3. ua(£) is a (weak) repair (respectively, justified (weak) repair, founded (weak) 
repair) for (I, AIC(P)) 

4. Tw(ua(£)) is a (weak) repair (respectively, justified (weak) repair, founded 
(weak) repair) for (1 + W, T W (AIC(P))) 

5. Tyv(£) is a (weak) revision for I ~ W with respect to T>v(P) (respectively, 
Ty\?(P) -justified (weak) revision for I W, Xyy (i-')-founded (weak) revision 
for IvW) 

6. TW(£) is a (weak) revision for I-j- W with respect to Tyy(G) (respectively, 
Tyy (G)-justified (weak) revision for 1 -f- W, Tyy (G)-founded (weak) revision 
for IfW). 

Indeed, (1) and (2) are equivalent by Theorem [T3l (2) and (3) are equivalent by 
Theorem HH (3) and (4) — by Theorems 6 and 7 of [8] (the shifting theorem for 
(weak) repairs, founded (weak) repairs and justihed (weak) repairs). Next, (4) and 
(5) are equivalent by Theorem [TH as well as Lemma Q21 and (5) and (6) — by 
Theorem IT3l and Lemma [T2l Thus, the assertion follows. □ 



